mail.matisa.ch

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0e:fe:48 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=0idQVHdPIxBgmAP/1UgrRpKU3TMLgFfO,CN=mail.matisa.ch,OU=GT68381409+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - FreeSSL

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:fe:48
Serial Number (int): 982600
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 37:b1:af:df:ab:56:fb:dc:1b:99:ef:3d:97:e6:e3:cd:10:63:4f:75
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 60:47:a8:a1:61:d2:c5:4f:95:3b:af:f0:2a:5a:16:71:ed:76:3e:91
Fingerprint (sha256): 68:3f:8f:ba:c9:f3:b6:7e:31:13:0f:6f:57:9d:04:a5:e0:e6:35:07:de:0f:f8:b1:b8:50:3a:36:f8:8c:49:3a

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate mail.matisa.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.matisa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.matisa.ch

Other certificates including the domain name matisa.ch

(limited to 100 certificates)
customerportal.uk.rlb.com
service.littlegarth.org
helpdesk.matisa.ch
customerportal.uk.rlb.com
support.homeinstead.ie
service.littlegarth.org
*.matisa.ch
www.matisa.ch
itservicedesk.poundland.co.uk
www.matisa.ch
support.sodra.com
connect19.ca
connect19.ca
customerportal.uk.rlb.com
customerportal.uk.rlb.com
helpdesk.matisa.ch
servicedesk.am-labor.de
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
customerportal.uk.rlb.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
servicedesk.christs.cam.ac.uk
remote.matisa.ch
www.matisa.ch
customerportal.uk.rlb.com
support.homeinstead.ie
itservicedesk.poundland.co.uk
servicedesk.christs.cam.ac.uk
service.littlegarth.org
vpn.matisa.ch
customerportal.uk.rlb.com
customerportal.uk.rlb.com
helpdesk.acrotec.ch
customerportal.uk.rlb.com
servicedesk.synergyretailsupport.co.uk
connect19.ca
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
helpdesk.matisa.ch
mail.matisa.ch
servicedesk.ecm.software
helpdesk.acrotec.ch
customerportal.uk.rlb.com
servicedesk.am-labor.de
helpdesk.matisa.ch
servicedesk.synergyretailsupport.co.uk
helpdesk.acrotec.ch
helpdesk.acrotec.ch
connect19.ca
support.homeinstead.ie
customerportal.uk.rlb.com
ftp-doc.matisa.ch
*.matisa.ch
helpdesk.acrotec.ch
support.sodra.com
www.matisa.ch
vpn.matisa.ch
servicedesk.ecm.software
support.sodra.com
servicedesk.tpos.co.uk
www.matisa.ch
itservicedesk.poundland.co.uk
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
connect19.ca
cattsupport.matisa.ch
connect19.ca
customerportal.uk.rlb.com
*.matisa.ch
www.matisa.ch
*.matisa.ch
servicedesk.synergyretailsupport.co.uk
customerportal.uk.rlb.com
connect19.ca
*.matisa.ch
support.homeinstead.ie
connect19.ca
www.matisa.ch
soporte.klz.rf.gd
customerportal.uk.rlb.com
helpdesk.acrotec.ch
connect19.ca
connect19.ca
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
servicedesk.am-labor.de
connect19.ca
support.sodra.com
servicedesk.am-labor.de
webmail.matisa.ch
helpdesk.acrotec.ch
customerportal.uk.rlb.com
customerportal.uk.rlb.com

Certificate

The complete raw certificate details for mail.matisa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2X2L7VxGNnl1raVIDc4
vdeEQRNTW8xXy2QTbbP2SldirwduvPJAVGtjQEBjbP/xnflBYVLqxTxRCvbtLAdO
j2C8RAu0X1UbQtZI+iMKXSUp9vdXWMUWevymgwzJsisCIUBtuuCkI9jOpoEdKyHm
nRZTlyEjNAaZPtBkLnvhUBCXfEL6/2PmY1NiWIKEzaVcsreOAAYrzsfQWUiMcNBk
PIYP4ciU4ykrqg1m9NcWzWXOLnc62VQRZLeycq+dNZiWSKPkJQhIt3ViwPjGFO96
KS2xagV5lhdAqMBWX3KsWrb4XkGvrtd3V6VdoeZvY+hMdmIlrtFsG3KdSH8sYgQp
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 982600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-10 14:23:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-11 17:11:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0idQVHdPIxBgmAP/1UgrRpKU3TMLgFfO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT68381409'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - FreeSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.matisa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26181608299151639611286413972652154334172990442716007631603881329366007141556565284042040763158058133017504327850054933478615170586589740848697402576185247227717372959719504187880317169321224441157802410320386333384817185753449726354805834966474015146796666545731413878179601408169669917064027896999708688507945834163610226565453232560353036340443241958106252918571926656130768397679733853170804606277002980655561293088369026040684725002079686433912629096773566386232906674815016565482399094108363224796045216791133162576001128652835620838618823391853615454474798556391211186729524216238920718568276036848633952610671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.matisa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37b1afdfab56fbdc1b99ef3d97e6e3cd10634f75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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