zimbra.pcalacarte.net

Issued by RapidSSL SHA256 CA - G4

About this certificate

This digital certificate with serial number 5a:4a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=zimbra.pcalacarte.net

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:4a
Serial Number (int): 23114
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: f3:b5:56:0c:c4:09:b0:b4:cf:1f:aa:f9:dd:23:56:f0:77:e8:a1:f9

Fingerprint (sha1): 58:c8:2c:e4:8c:a3:6d:6a:41:a0:9e:80:55:a8:47:77:88:06:e3:00
Fingerprint (sha256): be:73:af:6a:a2:e4:24:4f:8d:26:88:eb:4c:be:73:e1:fd:96:ef:b3:90:79:72:89:94:80:35:e3:46:86:b8:d5

Issuing Certificate URL: http://gz.symcb.com/gz.crt

Revocation information

OCSP Server: http://gz.symcd.com
CRL Distribution Point: http://gz.symcb.com/gz.crl

Check the revocation status for certificate zimbra.pcalacarte.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zimbra.pcalacarte.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zimbra.pcalacarte.net

Other certificates including the domain name pcalacarte.net

(limited to 100 certificates)
exchange.pcalacarte.net
eden.pcalacarte.net
zimbra.pcalacarte.net
zimbra.pcalacarte.net
plymouts.pcalacarte.net
zimbra.pcalacarte.net
plymouts.pcalacarte.net
plymouts.pcalacarte.net
zimbra.pcalacarte.net
zimbra.pcalacarte.net
zimbra.pcalacarte.net
zimbra.pcalacarte.net
zimbra.pcalacarte.net
plymouts.pcalacarte.net
plymouts.pcalacarte.net
zimbra.pcalacarte.net
tty.pcalacarte.net
eden.pcalacarte.net
git.pcalacarte.net
eden.pcalacarte.net
zimbra.pcalacarte.net
push.pcalacarte.net
plymouts.pcalacarte.net
exchange.pcalacarte.net
eden.pcalacarte.net
eden.pcalacarte.net
zimbra.pcalacarte.net

Certificate

The complete raw certificate details for zimbra.pcalacarte.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN5JDYkBK633zsIkR/5y
+bGS98tJMQLgXEVvnfx+yuXHbzvB3fRWhJlc+sN7OluPNC/q29B9zICOZ+4zPiV4
qblO4huWtqcXHkG7qFtGz27vy+UXK2ZVHO6biqn+e+X/MMSxzAThV0FbfBoHjwBW
tiM3qHVxhfHi9X83VN/95vC3bVPjxTH09SAeis0j8d5HeCrEKtLOEctQEGPeNSMw
jzLwSMx2D43ulnRyShlrI6Jlb71144vq2mVBfl3smidpV2Z163LUXCOFRU/K7l/4
QImyzJCp+5sOYWZTYMP8Bg+c6VaPEHV/vb/r4+mcqXytqNY8J3MOT4/tGNLGJtmk
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-23 20:33:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-09 08:09:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zimbra.pcalacarte.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25862227210795329679052295202637608136302074724419171273150384339934277478892029569944406504874732509564995579968585160259113650845090854446327587679756572436484883524471304697217409549148173952694862744001865988537275635962748629299798260661834114313368922389520066762703009602265764083808909498217640148841330175247347550163509534420362512503898039661876145783772164063789336685047969073949572850229569146215240711096203292535774488803626499713600638715043584531421607459497377152595812516296687300841886461113494597592014097960058645153423411101680036360433354363941802235441485269229700374788498967735882550453347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f3b5560cc409b0b4cf1faaf9dd2356f077e8a1f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimbra.pcalacarte.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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