mailgate.activpayroll.com

- activpayroll Ltd. -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:7b:54:7f:0e:95:02:e0:f5:cb:4b:82:9a:30:ca:c0:99 was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

activpayroll Ltd.

Organization: activpayroll Ltd.
Organization unit: IT
State / Province: Grampian
Locality: Aberdeen
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:7b:54:7f:0e:95:02:e0:f5:cb:4b:82:9a:30:ca:c0:99
Serial Number (int): 1492302112721754154550406676037189690376345
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 26:ec:39:66:c8:a7:2e:0f:ed:09:3f:14:fc:ec:7b:ee:f9:bb:13:be
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): c0:45:cc:46:0b:0a:b7:77:37:be:c1:2a:c2:77:bd:eb:ee:72:1f:5a
Fingerprint (sha256): b1:c5:9f:14:04:37:31:27:a7:01:67:8f:37:d5:02:c2:79:67:3e:96:f1:97:e3:59:58:ba:f0:5b:e4:8f:35:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate mailgate.activpayroll.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailgate.activpayroll.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailgate.activpayroll.com
AP-ABZ-EXC-01.activpayroll.local
autodiscover.activpayroll.com
mail.activpayroll.com
owa.activpayroll.com
autodiscover.activpayroll.local

Other certificates including the domain name activpayroll.com

(limited to 100 certificates)
activ8.activpayroll.com
activ8.activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
activpayroll.com
www.activpayroll.com
ereporting.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
activpayroll.com
mailgate.activpayroll.com
activpayroll.com
www.activpayroll.com
apa-dc-fmc.activpayroll.com
apa-dc-fmc.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
mailgate.activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
*.activpayroll.com
activpayroll.com
activ8.activpayroll.com
apa-dc-fmc.activpayroll.com
activ8.activpayroll.com
activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
mailaus.activpayroll.com
www.activpayroll.com
www.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
*.activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
mailgate.activpayroll.com
activ8.activpayroll.com
activ8.activpayroll.com
activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
mailgate.activpayroll.com
www.activpayroll.com
mailgate.activpayroll.com
www.activpayroll.com
www.activpayroll.com
mailgate.activpayroll.com
activ8.activpayroll.com

Certificate

The complete raw certificate details for mailgate.activpayroll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHD4a8tsd+HRqZVsAjGI
MH9HIGkc66qYEytjZZAXVrBVd5pDRsdeGi7NlHHIc1lvXommM1Sr7c9pA5yFDGaW
zBSZCy6jOhE2fWAp0KhwxVnLs7cfgA1Yp+/RLAXxaa52N90VhYllYlURegV+hNPC
1yYebnHRQHyG/iWe1mSOrwvzI24MyR7MxsWhQP6jnomsJpIyMNohHX5CFnKNpWmI
dAnwSWjSEa+ANWUszKg/ZgnjfAx8KxTNR+fcZYUieMJNkm5mcSre088O1OsCWqgA
yw+w2WDasKWg4L0lKEZ++wgZXAMevJUymMMgGk591SABSjo3im0iJq2AqACli0rK
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492302112721754154550406676037189690376345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-07 15:08:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-03 15:34:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Grampian'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aberdeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'activpayroll Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mailgate.activpayroll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23283555891695591035289689233978530377442574864712117401882666797480076947972172522525279285797644316931045450705164630206315957601441142058516439629310759875774786006325322140030845885159128819451683486660931161380298482452885301332465081291227682451084574311487453795202795905619332898646437563628231536408699341561345633183477974461954966170578899762279686598139050317787065443238826077019558326653335460158791669871222084946103389468939243927657035152190374150342267160710703156308483277789873219870987043123201328951841642886702158613561089733973149455342619165222628394843065239102349502993135659357496199006897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgate.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AP-ABZ-EXC-01.activpayroll.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.activpayroll.local'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26ec3966c8a72e0fed093f14fcec7beef9bb13be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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