webmail.icelandairgroup.is

- Icelandair ehf -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:ee:66:9b:2e:b7:82:e0:a8:91:a8:ed:29:92:f8:68 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Icelandair ehf

Organization: Icelandair ehf
Organization unit: Email
Locality: Reykjavik
Country: IS

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ee:66:9b:2e:b7:82:e0:a8:91:a8:ed:29:92:f8:68
Serial Number (int): 7883987731858792450096334318381234280
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b6:dd:6d:0f:c5:96:8e:e8:27:a2:fc:dc:f9:2e:7c:08:8e:87:a6:19
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 76:73:18:d2:33:f9:dd:be:8d:82:1d:d7:09:64:3e:1e:7b:16:73:72
Fingerprint (sha256): 6f:06:b0:e2:8c:14:7b:70:51:85:57:47:dd:86:66:82:7f:fb:2e:22:55:23:53:f1:7b:d8:55:79:28:27:a8:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate webmail.icelandairgroup.is

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.icelandairgroup.is

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.icelandairgroup.is
autodiscover.icelandair.is
icerekms03.icelandair.is
icerekms04.icelandair.is
autodiscover.amadeus.is

Other certificates including the domain name icelandairgroup.is

(limited to 100 certificates)
webmail.icelandairgroup.is
lyncweb.icelandair.is
*.icelandairgroup.is
icelandairgroup.is
*.icelandairgroup.is
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
overcast.io
overcast.io
webmail.icelandairgroup.is
webmail.icelandairgroup.is
sni.cloudflaressl.com
sip.icelandair.is
*.icelandairgroup.is
overcast.io
overcast.io
lyncweb.icelandair.is
webmail.icelandairgroup.is
lyncweb.icelandair.is
sip.icelandair.is
overcast.io
lyncweb.icelandair.is
sip.icelandair.is
webmail.icelandairgroup.is
*.icelandairgroup.is
sni.cloudflaressl.com

Certificate

The complete raw certificate details for webmail.icelandairgroup.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7883987731858792450096334318381234280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair ehf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Email'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.icelandairgroup.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694039117201177680484251551377420501146368346655847424383385813071467817917450270590068070903579910580861151844878821427362436348019607480139052250022186186568069750540219972688351593262789781218148998066861384875820145801757470814760268815401387769924645054721618738086983659784134594655309562316597948994073178681500967353232932024082773652064161674691551446423196180100090782616156962473076707370931301855530864730106853003735697260120485729354044708722065960783737882994571101182225034956812789418127156224568385196847658742357770372659131389700089829310401672269944559305312256390010177158847681792734360523671675434029799695662007737480547597444273228939422358293901712345755833578133886742805504673016243831774196702920931738612105509733613493343719536067844692227958544380625322470315179003907061592910124058037084536867866340639985256534862350396000569927763802370959244450777025029859360399354037240228387706892132131009323975681634949311534928738820664680504164437940070989832093029997084496232135428206821736040392214304977575309231236320666121771875891308151698843841868706865534625323443948757004248087614831027357514250515154940993584696192408580385560165025390897885951419236363093573175872986292700128680132978886021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6dd6d0fc5968ee827a2fcdcf92e7c088e87a619
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.icelandairgroup.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerekms03.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerekms04.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.amadeus.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00075427e862e9815e0095edb1f82d0faa9f5feffd391d7eb62145348e932c6e8022632739f0a59054f99368e57055baf396aede5291bbff18715c15090de93cfe122a0ff93a8e0a391e358ae8e298e5ee5cec4302b3a2942c0b4e27e5c6c2fca6f29739f407f2528b3582d1402c73aca1ef5e7bea7ada2ef7674e7e2c22c0ad3a92414e17960cd7074a30941bb5331e2acda02445ef0553c27460f6bf24fdcf4d6a81ef049edb7a7676628a9b3272224a8abb53b22037566b3538b758b1cf79b146e0789d1ed23e8a0faf1a9c322486898ccdc0544193c928d0da7175612e25692a2aab582c0f1f193dcbdc9f438b142533956276ff5baa7de1c6304c4cad1e76