gtlbmllyf0100.bagmail.net

- Bertelsmann SE & Co. KGaA -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 55:fc:c5:36:08:36:f5:1c:a6:93:ec:e8:02:61:92:5a was issued on by GeoTrust Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bertelsmann SE & Co. KGaA

Organization: Bertelsmann SE & Co. KGaA
State / Province: NORDRHEIN-WESTFALEN
Locality: Guetersloh
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:fc:c5:36:08:36:f5:1c:a6:93:ec:e8:02:61:92:5a
Serial Number (int): 114296838365623640489691318423935619674
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 3f:6b:82:3e:e5:86:e0:96:80:57:84:e3:95:13:dd:dd:22:b1:04:c7
Fingerprint (sha256): c7:88:d4:00:97:dd:16:1d:37:2c:15:3c:54:ac:9b:84:dc:ee:5c:f0:31:24:26:00:36:68:dd:db:b9:b8:29:53

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate gtlbmllyf0100.bagmail.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gtlbmllyf0100.bagmail.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.bertelsmann.de
gtlbmllyf0102.bagmail.net
gtlbmllyf0101.bagmail.net
dialin.bertelsmann.de
meet.bertelsmann.de
gtlbmllyf0150.bagmail.net
csweb.bertelsmann.de
gtlbmllyf0100.bagmail.net

Other certificates including the domain name bagmail.net

(limited to 100 certificates)
um.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net

Certificate

The complete raw certificate details for gtlbmllyf0100.bagmail.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9Rk8RnBVeQADVG2vod
eedEXCbtB6M48AHMDmD1VjmYsPuW66Mt2BgVS74Lituu/V0tdSEPXrXESU0YVPiz
yWEvyFE03mZjcEtDBqy+T0Np2NkToQW1WLbgQM3hr8CphfkZCUj50DdrmGDO0ROJ
hOej9EX7ohSZPVK67AtJs9Qi5msBUqlzw1UP0cFr3wM9XUluFXD9LuTug4lLScBa
/SR9CC2k47WTBl6zT3wqVEJ4zI+HxWWC/Ez4hFJRvYFLBHIrJtA6E9zwkPiKo+ee
U2Ykv+voGTxivhcY5PpGwim4cCTkV4E4Q8ae0YhzQEq3UatxPBurlqAcWY/BHE8S
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114296838365623640489691318423935619674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NORDRHEIN-WESTFALEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Guetersloh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bertelsmann SE & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'gtlbmllyf0100.bagmail.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23787694611257851249994338023069586877955819852109678735670156972401098469104583485369347571312214419982576762755695391356902023134175758748673173968217541650919243238666534884370004414372943555654250469156767858905055339904097783608348816501376881013735035211199401226086753495698722418491336410344604982434965924570355635761809887192835568888463880513664864249336471743079170771040946557003323867447894553526052823981692877050391447292908523764256452063787511600271551157334018141501478580593237774677524414687619767602272628733173090165767934821262848963347179535660805375930514562287198716156556718949292007428621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0102.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0101.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0150.bagmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb.bertelsmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyf0100.bagmail.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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