auth.mailmanager.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:91:20:9e:ae:96:97:32:9e:32:d5:9b:68:73:7b:01 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=auth.mailmanager.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:91:20:9e:ae:96:97:32:9e:32:d5:9b:68:73:7b:01
Serial Number (int): 20691964590450726799844695770427259649
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:82:39:24:8b:87:ae:98:83:4b:fc:df:ee:fd:8b:ef:18:8d:b5:3b
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 86:c2:6f:3b:a5:2a:3b:3c:84:b5:35:75:3a:f5:b5:6f:12:12:59:c6
Fingerprint (sha256): c0:bd:98:06:95:e7:03:ea:c8:7a:8a:13:76:1c:c4:c0:25:90:2a:79:33:74:8d:5f:62:9e:4c:c2:02:88:f4:9c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate auth.mailmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.mailmanager.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.mailmanager.com

Other certificates including the domain name mailmanager.com

(limited to 100 certificates)
application.mailmanager.com
info.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
info.mailmanager.com
mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
support.feelserv.net
application.mailmanager.com
support.feelserv.net
support.feelserv.net
blog.mailmanager.com
mailmanager.com
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
content.mailmanager.com
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
info.mailmanager.com
blog.mailmanager.com
support.feelserv.net
cfapi-p1.mailmanager.com
support.mailmanager.com
support.feelserv.net
blog.mailmanager.com
sam.mailmanager.com
support.feelserv.net
auth.mailmanager.com
support.feelserv.net
mailmanager.com
cfapi-p1.mailmanager.com
support.feelserv.net
mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
auth.mailmanager.com
www.mailmanager.com
support.feelserv.net
support.feelserv.net
rcs.mailmanager.com
blog.mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
mailmanager.com
sam.mailmanager.com
mailmanager.com
content.mailmanager.com
rcs.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
support.feelserv.net

Certificate

The complete raw certificate details for auth.mailmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw+0nVO3B9RdpNXTJkzC
2F2W/WjD2vUPIEgePib6Iv1hDehc4QQN7kjO26yAogDoG6ZIdd3Edy6qmWhnpJ5y
M7Lm4n8F26lgNTFa+E0Dsl4Pf8zign4luu2UqsNk7X+iLPSoUfCob32yXTrJzNxS
GO99AY8avsuUyb5TUl6m/f68uutFldpnjCfOtudkM6lv0WoWIs/giw/NJt58fMe0
ilXk3Sq4mxKy1gAly5Nh+ygaTzW8MBY1DZZLyRO1d55Ese6vYrhbxp4axcyBnMZi
rF2xxky6sI1GZZ25lZyr9hMbfPDUHoqzYtPmeYH+91syiJq534bZDs1kZx9EczNP
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20691964590450726799844695770427259649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.mailmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19069728733206218552938835288808885260182105540670257356284365041085524910795403519951896273308612089442802694744758266495880704351003561869205405799591823923412396118359828777197081680715759337936314993788133321326741980678191684634020741561953251474173603775617217730478597867786725022492772235343043021465387550045026622393582034001765759424367814320679103111849981119801129030604779518838665786954688941915485490812976268282562541746961402999248049679373800759388751439751789717975098585204833717587576138544467643770338895652709019867833784464878879928540238398251284415562915855751544724121292413203699079532441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb8239248b87ae98834bfcdfeefd8bef188db53b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.mailmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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