gtlbmllyf0100.bagmail.net

- Bertelsmann AG -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:19:92 was issued on by GeoTrust, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Bertelsmann AG

Company registration number: x1jvaOIS6LriSG4snUf6VX8kdHyPCnKf
Organization: Bertelsmann AG
Organization unit: arvato systems GmbH
State / Province: North Rhine-Westphalia
Locality: Guetersloh
Country: DE

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:19:92
Serial Number (int): 72082
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: f3:b5:51:a0:d2:45:22:d6:a6:25:28:ba:f0:76:4b:c3:a0:ac:04:2d
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 08:61:0e:7c:4d:39:1b:56:f0:3b:c2:f4:ee:a0:3d:0c:af:fa:f0:eb
Fingerprint (sha256): aa:01:fa:2b:4e:75:02:82:47:ef:3e:2d:aa:a0:ec:31:b9:da:b2:08:b3:cf:f3:fd:73:da:7b:07:93:0d:97:6f

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate gtlbmllyf0100.bagmail.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtlbmllyf0100.bagmail.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.bertelsmann.de
gtlbmllyf0102.bagmail.net
gtlbmllyf0101.bagmail.net
dialin.bertelsmann.de
meet.bertelsmann.de
gtlbmllyf0150.bagmail.net
csweb.bertelsmann.de
gtlbmllyf0100.bagmail.net

Other certificates including the domain name bagmail.net

(limited to 100 certificates)
um.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net

Certificate

The complete raw certificate details for gtlbmllyf0100.bagmail.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31r5wzNw14tQH6KtiKhI
kLmHvB58q0lIlgZFo2+N8qg6Hr2wjLzL2s7NLQvVGBdechkZvBUzvMWIDYUO6+Kj
aW0T30xnBQQr4Xfe28J//sZFivgZipHOVTzwDddOv8XZtypS2r5ApDIGLMcZeI2N
lbYcAPucvt3qNA8DAQlRVYmUS/RxvozNXnF0JThEv0XhrsU0ievlQigm2yHgJ95B
966i2LiQVZwdAiFVjI8DfSTcSm2RbIP9t70ozwcz4KsdEYshc9bJkUO6rx3Cuf2w
3gAWPL6QQ/2tMxqkSHt7/Mm71hAWTM+M+olv2CGWO10be/Oa7vOFdhP2y5vc+VZV
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-21 11:13:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-23 01:19:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'x1jvaOIS6LriSG4snUf6VX8kdHyPCnKf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guetersloh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bertelsmann AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arvato systems GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gtlbmllyf0100.bagmail.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28196003764961680280062104738516942007642225895966900855391069592954320000180895203873809871670257375865824186481828411673253105840081534053991233835512989604233162518885535790759840900868998521945101822752153446495769227722367979975728995063629549817956138441966047805438931832180591032735806668426747362806620239884231842082053562649235111651262464646217376382597768550090725365106971141301597887552393698442442216673021989762317471020263312048032642286993275852524880220650436095501476006194156442375967368102926622444426287375790396990538405378443644160497555227233690812663485687682818247389189828168611865711879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0102.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0101.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0150.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0100.bagmail.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3b551a0d24522d6a62528baf0764bc3a0ac042d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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