mail.softdebut.com

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 1a:fe:e1:3c:e9:4b:67:0d:56:e1:d9:60:96:32:fd:fb was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.softdebut.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:fe:e1:3c:e9:4b:67:0d:56:e1:d9:60:96:32:fd:fb
Serial Number (int): 35883339660527394769511804077627080187
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 86:67:60:d7:86:52:d0:bd:00:84:b4:7b:e1:c3:23:8d:f7:bb:18:f8
Fingerprint (sha256): 9d:0a:13:51:94:fc:91:c9:73:cd:01:dd:b8:9e:37:f7:0d:c9:40:8e:e6:5b:ec:d4:a3:69:ed:2b:97:ac:7c:9f

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate mail.softdebut.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.softdebut.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.softdebut.com

Other certificates including the domain name softdebut.com

(limited to 100 certificates)
softdebut.com
jastel-mailmanagement.softdebut.com
ast1.softdebut.com
jastel-mailmanagement.softdebut.com
ssl866376.cloudflaressl.com
sni.cloudflaressl.com
softdebut.com
support.3columns.io
deskportal.softdebut.com
softdebut.com
support.3columns.io
ast3.softdebut.com
softdebut.com
fdl.softdebut.com
ssl419092.cloudflaressl.com
ssl419093.cloudflaressl.com
ssl419093.cloudflaressl.com
mail.softdebut.com
ocfile.softdebut.com
support.comunitech.co.za
ns1.softdebut.com
ssl419093.cloudflaressl.com
mail.softdebut.com
softdebut.com
ast1.softdebut.com
deskportal.softdebut.com
dns.softdebut.com
sni.cloudflaressl.com
dns.softdebut.com
deskportal.softdebut.com
demo91.softdebut.com
ssl419092.cloudflaressl.com
softdebut.com
zbmon.softdebut.com
ssl419091.cloudflaressl.com
mail.softdebut.com
sni.cloudflaressl.com
ast1.softdebut.com
mail.softdebut.com
softdebut.com
ssl419093.cloudflaressl.com
mail.softdebut.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl419091.cloudflaressl.com
sapphire.softdebut.com
deskportal.softdebut.com
mail.softdebut.com
support.3columns.io
sapphire.softdebut.com
softdebut.com
mail.softdebut.com
support.3columns.io
ast3.softdebut.com
softdebut.com
ns1.softdebut.com
ast1.softdebut.com
softdebut.com
ast3.softdebut.com
ast3.softdebut.com
kenticocms.softdebut.com
kenticocms.softdebut.com
mail.softdebut.com
ast3.softdebut.com
fdl.softdebut.com
softdebut.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for mail.softdebut.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw7+zNPLtxGy7u+qbbda
dtvwJ+XaAlFc2DdB+X4ZwAx/cQADZ/lzdXn+sunS4YmVIUKOLOjOy3J9OmObGM4w
dt0Os69A8zmQxZUus3slnDxAETbbMJ+oYcRi18Qo53eBDynH8rz78SzrsAu/8msO
sYLqHqYxnVJI2lCdcXJKiQ54Ybr396fPdRxlphguhSmmleq+2ue1P+CFYaWDSbbk
FLSujHLPsuDxYTOkuu4V1uox5Di9oHpdFdSQFsLvMpLnpfRA2HyzHlekDEehIjIx
jIdl5YG6/GL27HTAvhT32NvtwoXGcNy6WDQCoAcPZMmhboEZccsAo1ntUt5fsT+C
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35883339660527394769511804077627080187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.softdebut.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22604051053319318343363704289170742273244738910468501392300255343036179392500512884633966613197944382776035388359123575394054618230889928611230707994518244076697669877829306400357280775353396331994217648589839242942433942383429081211709783659915671729552347360802946825857206375806142108039023038363232144980107828497038893149553872591588752214959062817657183212973146325091065780101166312382852525057391950254544497504603405586267561362065272952885512518719580843165876511628548480164975572203965657055072032488843214503885610201893963781105711809524166569532820396766555728960833494160671442039564189816105090384501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.softdebut.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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