sam.mailmanager.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:32:f6:ed:a3:8a:03:32:fa:0d:53:bc:95:f7:48:24 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sam.mailmanager.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:32:f6:ed:a3:8a:03:32:fa:0d:53:bc:95:f7:48:24
Serial Number (int): 6910763122301238408958727887871494180
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c7:cd:a4:24:c4:aa:46:c9:80:b7:b2:f0:9c:57:49:31:23:e4:2b:04
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 44:54:ba:2e:49:50:6b:20:d2:8c:d9:fe:52:bc:35:8d:ba:0b:49:eb
Fingerprint (sha256): 88:63:aa:4f:f4:68:c2:98:ff:4a:f8:50:86:2d:36:b4:76:ae:45:74:44:e4:10:38:d4:0f:6f:ae:f9:bd:2d:ef

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate sam.mailmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sam.mailmanager.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sam.mailmanager.com

Other certificates including the domain name mailmanager.com

(limited to 100 certificates)
application.mailmanager.com
info.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
info.mailmanager.com
mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
support.feelserv.net
application.mailmanager.com
support.feelserv.net
support.feelserv.net
blog.mailmanager.com
mailmanager.com
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
content.mailmanager.com
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
info.mailmanager.com
blog.mailmanager.com
support.feelserv.net
cfapi-p1.mailmanager.com
support.mailmanager.com
support.feelserv.net
blog.mailmanager.com
sam.mailmanager.com
support.feelserv.net
auth.mailmanager.com
support.feelserv.net
mailmanager.com
cfapi-p1.mailmanager.com
support.feelserv.net
mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
auth.mailmanager.com
www.mailmanager.com
support.feelserv.net
support.feelserv.net
rcs.mailmanager.com
blog.mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
mailmanager.com
sam.mailmanager.com
mailmanager.com
content.mailmanager.com
rcs.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
support.feelserv.net

Certificate

The complete raw certificate details for sam.mailmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cv/GZCOJXztOccLm4A3
lmXMJvSw6PiMBUgycBuxIy2IWKsFEOA266XsV1ivRTLIcpDpLB7Siw+TChvKZW32
kDzpBgFHziVog+lnh7U3eV31SC2aM+HpCQ0CQFTdIbxrxy6mT7dNkH12bLPXMt+D
80sjBXQvPoWg8NM9IXwFneE4sCNR5e60ZuY2CBxt7kA5nu2t9aCqrYDPB32bjAcU
z+VtmTXRvq+fxsXVGqpxt9UDpncI4hfnmuSXooKLfPuMCTjWxdqfS06FcTyeXnFe
BSbja9FmTf61k+eZCWtVgbfmYglUejyrRQ9sTAaEsDO+jHt5unbkU5uQdVAl/RqX
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6910763122301238408958727887871494180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sam.mailmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27794122567313793517721786133770304615019539643781746625878175041422506353281857695854760938028901073283723322528440205176723242911410425618309831184170198539739176151984099822165592926868822890277369784514572303579048340285763429181447060720396346560124985388922440505014438916272384341902778835418195122482544926413526174445315847456873161403081063874296363542733250124666131112854386831863573292364863896583085067590264177941608957128231790728601938957612986599134540262453601995034520086711686177988020357661251330987184360139350810494107400697853744708809713544633473726084724007647122433861472064470869243238153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7cda424c4aa46c980b7b2f09c57493123e42b04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sam.mailmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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