auth.mailmanager.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:da:5d:4c:12:29:6a:70:43:32:4e:b9:1f:a0:1e:95 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auth.mailmanager.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:da:5d:4c:12:29:6a:70:43:32:4e:b9:1f:a0:1e:95
Serial Number (int): 14426092964064040618609753583737904789
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:70:7f:47:7c:b5:ad:e3:ae:de:af:58:32:43:46:ea:87:39:37:38
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 77:08:d6:e9:82:55:2b:48:d2:72:6e:d0:0d:a9:c1:1e:3f:4f:68:67
Fingerprint (sha256): 9f:5d:95:1f:f6:60:1d:58:1d:17:c0:38:0f:4e:09:ae:80:72:4d:ea:34:1d:aa:3c:40:0e:59:c1:85:bd:35:0f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate auth.mailmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.mailmanager.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.mailmanager.com

Other certificates including the domain name mailmanager.com

(limited to 100 certificates)
application.mailmanager.com
info.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
info.mailmanager.com
mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
support.feelserv.net
application.mailmanager.com
support.feelserv.net
support.feelserv.net
blog.mailmanager.com
mailmanager.com
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
content.mailmanager.com
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
info.mailmanager.com
blog.mailmanager.com
support.feelserv.net
cfapi-p1.mailmanager.com
support.mailmanager.com
support.feelserv.net
blog.mailmanager.com
sam.mailmanager.com
support.feelserv.net
auth.mailmanager.com
support.feelserv.net
mailmanager.com
cfapi-p1.mailmanager.com
support.feelserv.net
mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
auth.mailmanager.com
www.mailmanager.com
support.feelserv.net
support.feelserv.net
rcs.mailmanager.com
blog.mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
mailmanager.com
sam.mailmanager.com
mailmanager.com
content.mailmanager.com
rcs.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
support.feelserv.net

Certificate

The complete raw certificate details for auth.mailmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zzH0OTJTl71CfCGif5m
fXFUkfzsPETIb/KBBBafMdCm/ZLSE0/7DcKZF/U34EP8FIcnwB7CqUwdrBW2Nc8f
EvjLWwZ45bpi7IVyXT2g1KOB8CqiTmFRw2EF/9AEJClqR/pAITUNzv7xIKxZGTM1
ucQD4ked13OXmZyQHzjVKzJ+Q10tVYXZzPOhxHi7xIGzB4QuHiRzVuvLqZNkxNwG
bsoV76ONeo8oi3/BmlxE1uXBvHj3qCopVnFIeuUD76ToXH6lmsHVAC6SD2zJsyTi
NdOuu5fkQNpFbPg/0mnZ8iKeqw9y3MVoXCCtIE6JNvQdmZw4esHv2TXvp4Lc44jB
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14426092964064040618609753583737904789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.mailmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29191020444173212899792617145634821860036841201617569843430106894972600693378648616942791760546399309207185119288594699080499727564334322672052849267937481784285182427248044501615719907193024043260809026170413957506501068047773107060320857939305410554078558780508315708763542258289581401149956399501667467160739340589012652117204683072532556703782840783501856808429864049815807657767396493199395220752024181205162022650262149820110120004355787611420463427443626419314400577323526672132524279724336521919221275215185328460798694169163068797483361028003018944315133636696200205460970925320890555147680679838539860984189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25707f477cb5ade3aedeaf58324346ea87393738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mailmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a0a632a1600000403004730450221008b24ee53063426450e250680f100dee0cf523b85bfac8851a7af59af070c06ac022056e0624cf0717ebdaa4442ec18d4571eb5a5d6a6cb05873ed880c587ca3c557b00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a0a632a09000004030048304602210095391d99224c87432875e26dfc1db52828bbbc8e68073f90eca76cc321ddc148022100d3188372c894886a4040849a0b8d329f10ac81941e1bbf07e316b31b0071fc73007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a0a6329db00000403004630440220661eb3a64f92b6a990db7e03f448f97666bcc0e140cdf91c9ccc0ebb8caf1a5002203033fdd0f3ad9bf715fc70509d3cd194f565183864308a0071665779ea988580
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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