mail.ca1.hostedlync.com

- ThinkTel Communications -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0d:5f:0d:03:29:4e:6a:f2:09:3d:0c:5c:c9:3b:dd:f7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ThinkTel Communications

Organization: ThinkTel Communications
Organization unit: Think365
State / Province: Alberta
Locality: Edmonton
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:5f:0d:03:29:4e:6a:f2:09:3d:0c:5c:c9:3b:dd:f7
Serial Number (int): 17773496068557736639198453855839575543
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fa:d2:f7:b7:f5:81:08:4a:b8:a4:b7:36:8c:62:0b:f7:5b:00:25:51
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 6d:bb:0a:44:cb:05:8f:d5:46:fc:eb:2b:c1:21:64:99:27:df:82:e4
Fingerprint (sha256): 5e:88:dc:a0:99:95:75:ba:98:52:af:13:15:c8:30:51:26:fc:da:60:a6:03:fb:12:11:a9:4c:79:47:ac:a0:04

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g7.crl

Check the revocation status for certificate mail.ca1.hostedlync.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ca1.hostedlync.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ca1.hostedlync.com

Other certificates including the domain name hostedlync.com

(limited to 100 certificates)
sip.ca1.hostedlync.com
demo.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.poc.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
*.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.trial.hostedlync.com
mail.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
mail.ca1.hostedlync.com
sip.ca1.hostedlync.com
*.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
*.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
webconf.trial.hostedlync.com
webconf.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
*.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.trial.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
poclync.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.poc.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com

Certificate

The complete raw certificate details for mail.ca1.hostedlync.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmF881Xxp0JlXgr8gRQU
5i/U5UxbR25fCOyfXugKY8jp3iZ5RJW0BqXnu+CP3MVwgpXSVJUEyXFM405tXjiA
GHTESMM+HieKMw7K258rZC5zsrTPKDczR4D6dPKj2Cy60/+tSmqV33jukugNrxrz
GxAXt5b/8iK5qhvd2dfzNZvVdxMxLCaXrNymrUjjxqQqEoK28gdWqJgyxEBVEKAU
9paTCDiDUIRuglI7WYvjgVIAM7Sj8ZLQC99H0YZlmRqHAXjjEnz/NOS0p1y6rJs5
Ukk+7kisdgoNv4KwhRGVmsoDcGctYzyP93fHFb8VVAIaaW4oFPMTrxbRo9vDGRUB
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17773496068557736639198453855839575543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edmonton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ThinkTel Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Think365'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ca1.hostedlync.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24538304331323820086698541107052751571309671527582023655910016060224059694646223172809238672980004955424700745127620975087702416092506176156741315063022481998776643002425432832633762218576078603727704835707784714435478341674952646695679349965013992686882774316044336426165881012667730134519961369414956357709113873698670625315956165855125071202073138364190793892712327061755549496271149725547723014412375183665448092873372174191800393885528616474095610788003344318941473375146689479357613203192970237496495213032436875168491927450820475051318833808602125041477562489081617899336910853082018446063965116405682676236779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fad2f7b7f581084ab8a4b7368c620bf75b002551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ca1.hostedlync.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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