mail.odyssey-messaging.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 0c:ce:4b:8f:05:69:d4:20:19:3e:eb:ed:5f:7b:85:0f was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.odyssey-messaging.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ce:4b:8f:05:69:d4:20:19:3e:eb:ed:5f:7b:85:0f
Serial Number (int): 17021881614300042375380629722519799055
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 73:6e:d9:52:39:e8:d3:88:e5:a4:6a:fb:20:94:85:5e:c1:c4:24:fe
Fingerprint (sha256): 71:c7:aa:db:0d:83:f4:16:24:8c:b4:12:a2:63:61:55:39:38:0f:58:20:19:0d:9d:e1:94:db:a5:96:42:b0:46

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate mail.odyssey-messaging.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.odyssey-messaging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.odyssey-messaging.com

Other certificates including the domain name odyssey-messaging.com

(limited to 100 certificates)
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
*.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
mail.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
mail.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
cb.odyssey-messaging.com
objects.news.odyssey-messaging.com
*.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
www.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com
objects.news.odyssey-messaging.com

Certificate

The complete raw certificate details for mail.odyssey-messaging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLNOSuzUasy2FY3VdGn+
6vbQvGuxT0LGN+lfsP8a1LrQbmPfCfSEH865OFd7Tqu7uGmKwBoMJ52kLPFNIXWa
f+BwCZ0hjQZy42T/Vsx3HegIUOHMn0ucvPcwtYkajJ8xBk8+RCZY6XYtSCum3x/o
SIuMrxDgcnh5sxXZMam8hLUuTURSxaI1QAm0OlZtvJz+SGWMY0ArL0+2mcESBrVM
Co7ttrMKiz/TNg7sncKn2XtcSt6gWEx6tyaLZkgU3dXIRxyQJzYe68QvqlpDVyUG
OnmxZQ3WUyKKZXbLxMI5ArFqHPJdv8fIjyg14rnK4TsSjJxHmP6yt9xH7UaNQGQg
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17021881614300042375380629722519799055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.odyssey-messaging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22811313894462815606497020500106038192471361461116804278494605678754589497500675041567808688310970946608527119196093096982541647948032243371934923270908527858904778049078136025110058761037193398634927198458376154252949586575020010646683425587877346107042473714859070212255445868541406242472863760423603879792355829997992109923405732244460477280839246846526769264750034557043149832801209841800362013737957798698688866782357485040226823179335033629127384925851487486602443439283919648396857669216178642292945411917117973262883852054785818684919744079137686582020433002080515402335846264610940321564796307361376164388999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.odyssey-messaging.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d27cb932b0000040300463044022049afc2c15118e750c629ce8d8c9340bde3b3add708a56db7ba4db5f6208ba1960220690a887f64cd9cd0d7cad2d31a1591bdbc6e76f41b8f2099fc66499ae926d57f007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d27cb93690000040300483046022100952b0cd195ee4b03553fae4819f11983613431756166b6d988904fdb6ef077b9022100eea8d4273f2ed9b57957f4b4fcdef00aa23cecb53ca35183ca34aa6302d01843
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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