mail.da.lv

Issued by GlobeSSL DV Certification Authority 2

About this certificate

This digital certificate with serial number e3:9b:92:e1:82:f6:1c:f4:a2:90:6f:70:cf:29:14:2b was issued on by Globe Hosting, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.da.lv

Globe Hosting, Inc.

Organization: Globe Hosting, Inc.
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:9b:92:e1:82:f6:1c:f4:a2:90:6f:70:cf:29:14:2b
Serial Number (int): 302542540154918084052325401668233008171
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5d:f5:eb:a6:8e:d0:6a:c2:35:19:88:ba:c2:33:54:80:47:7c:63:a2
AuthorityKeyId: c6:ac:37:cb:91:af:ca:a4:b7:2f:36:0f:f0:cb:61:54:f7:71:37:ed

Fingerprint (sha1): 8b:0b:73:9d:20:76:74:71:03:53:e2:74:f6:e1:f2:38:2d:c2:fc:c6
Fingerprint (sha256): 76:3a:95:0e:e8:ee:3a:79:76:98:18:b7:ad:3d:75:3c:02:ed:0a:89:c0:0a:1c:bc:b1:a0:04:1c:e2:98:46:e8

Issuing Certificate URL: http://crt.usertrust.com/GlobeSSLDVCertificationAuthority2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GlobeSSLDVCertificationAuthority2.crl

Check the revocation status for certificate mail.da.lv

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.da.lv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.da.lv
www.mail.da.lv

Other certificates including the domain name da.lv

(limited to 100 certificates)
mail.da.lv
mail.da.lv
mail.da.lv
mail.da.lv
mail.da.lv

Certificate

The complete raw certificate details for mail.da.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtfNEvnCx3DFcAROCTHEp
OM1nZ6BLlMIvp+pNpZaTa0fqZUaZ3HZwKKmb1LZLyBg73w+eGXQ9FKV7aLDlyKMF
HG4ig4X4OeZeX4xKglDGpHj6CG/qdrk4QrZE/7Xm5C3ttvNpKvIunydg8N8SV3i5
xorMcggXsZ350e2h2i6fTqT0ugVmAlnjdI4SxfPHYHIASfJIp9UbS038ihD6E8KK
fo7x6epDKtaYsLF+lJayrjppVan4CWPMdz9jzudbCNQmlzSMOPlDG7suyK+pbsAc
botVqXMoKwfCWs/hwa70EWiEOktHwgHVaANmcylA7HqpAp5e95nLZW6MAWsHy6vJ
s0LmbMl9Kjb9YjKgD6+dNtjyS+g8f6B6cAlaNaulebO1kBjKUBBrVpr9VgVyCh3X
TeiFzocIQU+Xs/hBZwjx7SSmfpTlHG89BKpcq/n7bTULtMeA39TSnOFMULbVzqDc
VlbgKoyareKvIctMUd47tXHOJ0WGa0uDnyz4B+daDHHqA5v12eGtdivhxOyn1BWO
CTg6Ki6oifWhXcUvrO4Goc21RuSAxNFXgHU9QGOpb/0XjlX1P5zCZWMqKaWXK+fT
+Ot5n5OBjuBNIPx+iuF1kRLj40AF4Zzx68dQPXyXhXs1imU7nbasO1n0gOXb4CPS
mbgKU8AxICGbKyheaRMYUq8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302542540154918084052325401668233008171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Globe Hosting, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobeSSL DV Certification Authority 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.da.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742292330291991961184754045745929083182229475994510081546429675619244180347615464429563968802540583827404905554571512208664567310396224286411197389502175128003094053945945592043803941769977836386057371776443024427191567319037145257633299565344864303671613711164748098097942470566000359817655389935892613248718062597366400020108763504752482570638902845591804980506355906655366540072353913192321171022105541356547437542007258123931761347876666149432424822611279870921155223964559180989439697968557214914667610244544851486068702320168072295619788356208846109259170976130149404767750056614166669016074712715976011957831703265045896477731372434086387409403073696906839741132129939658360108086096724604350321354278506770616869216963181021338384617226470725013335297428665520314929554069098222275122060587331165483683101008565322048676193722444399462248162043501590194586877286089695844883365076101524450262912771966140839509645493181935986569472033423037784292180377112126627396974786809686081015085841683509233233207605818835890894050972783824327588783791561334702372672766233168228675518141463508601657693091690778034238041109652192595888746323827328773046252327190398282204515439058216539146946073032483233651250997384495026310603100847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c6ac37cb91afcaa4b72f360ff0cb6154f77137ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5df5eba68ed06ac2351988bac2335480477c63a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.27
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GlobeSSLDVCertificationAuthority2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GlobeSSLDVCertificationAuthority2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.da.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.da.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00520edbd26e4c4d841d6d2241680994d3fddbb17a490f43c319bf68c2ca6c937d0f672f6f0b92e8f6238c7818b35fbbc8c1078e690ce05c53b3fc709be912baed60c4f87a0ffde946b677c826a1c6b739e69a2c2c50307f306c2a5cc0f0a09d5e01e68630ce375f4601ebfd96ed36aeae1514422af75cc9f1fd5e47464af80ffd81c8640c663a1b5bb844ae415c200ed3a6917a17c82d868f94e0be725ad93c1b3ea935509659ac6b65bbf8ce2650f47c8af7ab055b2ff33ee06a6a7727d1c91493b56bd14c97ebd59df1f7fac19e6c977644d1103e462ada7aeffba55ec8cf6ea32cb19aca11fa9125e57b5783ea89dbccf92009d11d0c49cf4e9c299988e68d