exchange.mirror.se

- exchange.mirror.se -

Issued by GlobalSign Domain Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:23:18:37:08:30 was issued on by GlobalSign nv-sa.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 5 DNS name(s) are bare public suffixes: ex1, ex2, ex3, dc01, dc02 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

exchange.mirror.se

Organization: exchange.mirror.se
Organization unit: Domain Control Validated
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Organization unit: Domain Validation CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:23:18:37:08:30
Serial Number (int): 1208925819615879416449072
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: a6:30:de:19:fe:59:c6:21:c6:40:b1:44:ac:a1:b6:5d:7c:dd:a1:98
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb

Fingerprint (sha1): 55:15:e7:a1:70:72:04:e3:90:3a:b2:42:84:c2:ff:95:7e:89:d5:cb
Fingerprint (sha256): 6d:a8:17:3b:7b:43:54:7b:0a:a3:62:a4:86:b2:fa:69:d7:5b:25:06:b2:d9:41:a4:49:33:e9:69:2f:57:c7:ae

Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crl

Check the revocation status for certificate exchange.mirror.se

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange.mirror.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.mirror.se
autodiscover.mirror.se
mail.mirror.se
owa.mirror.se
ex1
ex2
ex3
ex1.mirror.public
ex2.mirror.public
ex3.mirror.public
dc01
dc02
dc01.mirror.public
dc02.mirror.public

Other certificates including the domain name mirror.se

(limited to 100 certificates)
support.umixmedia.com
hg.mirror.se
support.umixmedia.com
www.kalixbo.se
www.kalixbo.se
www.kalixbo.se
newsletter.mirror.se

support.umixmedia.com
support.bisolutions.com.co
www.madame-chic.se
www.kalixbo.se
www.madame-chic.se
www.blueoceanglobalsupport.com
support.bisolutions.com.co
support.technologyhappens.com
karlbergsgymnasiet.utv.mirror.se
support.bisolutions.com.co
www.overkalix.se
*.mirror.se
www.kalixbo.se

support.finlandtech.com
www.kalixbo.se
support.bisolutions.com.co
testwp.mirror.se

support.bisolutions.com.co
help.onsiteitsupport.co.za
help.onsiteitsupport.co.za
testwp.mirror.se
help.onsiteitsupport.co.za

newsletter.mirror.se
support.bisolutions.com.co
*.mirror.se
newsletter.mirror.se
support.learningexpressce.com
support.bisolutions.com.co
testwp.mirror.se
www.overkalix.se
support.bisolutions.com.co
www.overkalix.se


www.madame-chic.se


*.mirror.se

www.overkalix.se
*.mirror.se
n-central.mirror.se
mail.hosting.mirror.se
www.madame-chic.se
exchange.mirror.se
hd.sjalabs.com
help.onsiteitsupport.co.za

www.kalixbo.se
help.onsiteitsupport.co.za

www.overkalix.se
www.overkalix.se
*.mirror.se

www.madame-chic.se
localhost.mirror.se
www.kalixbo.se
*.mirror.se
www.kalixbo.se

testwp.mirror.se



wifi.mirror.se
n-central.mirror.se
support.bisolutions.com.co

exchange.mirror.se
www.madame-chic.se
www.kalixbo.se
www.overkalix.se
mail.hosting.mirror.se
karlbergsgymnasiet.utv.mirror.se
www.kalixbo.se
localhost.mirror.se
www.madame-chic.se

support.finlandtech.com

support.bisolutions.com.co
exchange.mirror.se


service.hopedaletech.com
www.overkalix.se
www.overkalix.se
support.umixmedia.com

Certificate

The complete raw certificate details for exchange.mirror.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg8qIbXpJ2SVd9Nwdz/z
hxHS8EL2BvvxQhU0OxIyiW+urWaSsuxVyU532D1GvEP+qetECQhBlpzCMLaZhudJ
LDIkjCeMAdZKLHsarVB/c8oMCV8tvzdJgxY1GB9novAfwemj6oHs+GVpMZjESSsC
eNR042Z0ZckibSNR0R8EFMRVCbAj5XVjKJWVmAcR4mi1xfTlTCcweV3CZQ3da9sb
4mUk4HE+IQUW3hmSb/0Qy+JY/z0YzJRN4vLhdenixN1SQQtpbG338WukNl4TktVd
Fj30QdO543K0kwZRF1IGh0YorswbQlkU876DL6lidrzG+jJ7i2QAad9MhpeJacpr
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615879416449072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-08-14 08:29:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-07-14 12:00:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exchange.mirror.se'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exchange.mirror.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19448176896340245593612522772587624667930321757954549292466139087312748786215285534152286717575679179372449436621499828431481553823490191617356533268521677161388991720818440155691315280944223556165773269822998094570471048800175595371301955660260298537936432327817597152673481115611677602421241983137655190396109592256899432157954019533473928059254404410521410128755276309851702081727093266919224792104792676521514937392567851824762585541591554632498004160469979927622938534906155359401199045012111596034496089671719882564772060645124981069572341656060085341543155690013938699825894083704915621511839830821607632956363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a630de19fe59c621c640b144aca1b65d7cdda198
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.mirror.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mirror.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mirror.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.mirror.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex1.mirror.public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex2.mirror.public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex3.mirror.public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc01'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc02'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc01.mirror.public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc02.mirror.public'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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