exchange1.luthercare.org

- exchange1.luthercare.org -

Issued by GlobalSign Domain Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:26:2d:f4:aa:5a was issued on by GlobalSign nv-sa.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 3 DNS name(s) are bare public suffixes: exchange1, exchange2, exchange3 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

exchange1.luthercare.org

Organization: exchange1.luthercare.org
Organization unit: Domain Control Validated
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Organization unit: Domain Validation CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:26:2d:f4:aa:5a
Serial Number (int): 1208925819615892666100314
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: 88:db:af:51:33:bb:ee:20:b1:82:63:04:41:5d:e6:a6:27:7b:23:a6
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb

Fingerprint (sha1): 3f:bd:d0:83:4f:7b:52:48:c5:af:2a:e6:b7:40:7f:6e:d6:05:54:d8
Fingerprint (sha256): 6f:e8:86:7c:ac:b1:3a:bd:92:04:a0:e0:95:6b:d4:81:a4:a4:55:6a:e8:14:6b:bf:c1:05:7f:34:e8:69:17:30

Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crl

Check the revocation status for certificate exchange1.luthercare.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange1.luthercare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange1.luthercare.org
autodiscover.luthercare.org
mail.luthercare.org
owa.luthercare.org
exchange1
exchange2
exchange3

Other certificates including the domain name luthercare.org

(limited to 100 certificates)
LititzDC3.luthercare.org
*.luthercare.org
board.luthercare.org
board.luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
mail.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
lititzexch01.luthercare.org
storefront.luthercare.org
mail.luthercare.org
luthercare.org
www.luthercare.org
exchange1.luthercare.org
mail.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
board.luthercare.org
lititzexch01.luthercare.org
mail.luthercare.org
webapps.luthercare.org
webapps.luthercare.org

Certificate

The complete raw certificate details for exchange1.luthercare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszNpcRG/vuCETOSgbs8Q
Xn1F4bxXkiyoL7m/bAFUz3qjcIFKh2Vt5q5Owb4KGqHr8/cFMWEiflXY8RgVO8pm
HfjP5PN0WlU3fxRedo0fFuPottaU6Ult/BAWJ/t8IhbwimxZFe6DBdyKfpj7RMqG
EwwSwA2egrZoMRaynYCAy5FU2khWPtSMRrfUgGoa2dqgsvSMMcNYgnkp4KMhmnel
MILfFwWTz7XPePm8hLnRofrrP7grpt88unUUBI+0bAKPzA8vrq7zEeLPFxegDxoU
tDHSFjUYZbCHJZTKpXivliGiramyNpB7McsAYgVBt/DIhZeKXwv3e4bUWPJUW0j+
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615892666100314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-01-14 17:16:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-14 17:16:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exchange1.luthercare.org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exchange1.luthercare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22622008732604669318947436394921374157847256375505377477975905700486811186084518535544402981847084310832247892767346512203262201097727352000903014577585739817710467515389351241710747598398714260916142598781096325607637233127874912970998067200054639844628657732900108629228144823236020301066786994948487763741636757434170716759866517837735587861072909033385318216471997815101974967852409543025874103352837468766935576862026844214053815475140798539353529813777415446007561305813074321097096914514371206662956457969961342854527803737448986662084555188452480281818499632154872931246356866594578110720087882996385778826807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88dbaf5133bbee20b1826304415de6a6277b23a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange1.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange3'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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