*.sanmar.com

- San Mar Corporation -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:d7:a3:b2:d4:23:5b:85:8a:14:26:0e:ea:b2:e4:74 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

San Mar Corporation

Organization: San Mar Corporation
State / Province: Washington
Locality: Issaquah
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d7:a3:b2:d4:23:5b:85:8a:14:26:0e:ea:b2:e4:74
Serial Number (int): 6436576008756540877608668858816849012
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4b:f2:59:e5:4b:b8:97:90:77:33:34:5a:c2:e0:dd:a3:c8:fb:d4:cd
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 70:0f:d6:cc:dc:12:3d:71:e5:b4:df:4e:cd:5e:4b:a9:14:14:b2:85
Fingerprint (sha256): d4:1c:1b:76:70:52:a0:71:22:42:f4:8d:d0:48:99:cc:e2:29:6e:a7:3c:8c:2e:56:34:51:0e:30:05:63:a0:2f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.sanmar.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sanmar.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sanmar.com
sanmar.com

Other certificates including the domain name sanmar.com

(limited to 100 certificates)
sanmar.com
akamai-san91.exacttarget.com
shop.sanmar.com
accessedge.sanmar.com
education.sanmar.com
akamai-san91.exacttarget.com
mail.sanmar.com
skypeextweb.sanmar.com
skypeextweb.sanmar.com
*.sanmar.com
akamai-san91.exacttarget.com
sourcing.sanmar.com
*.sanmar.com
webvpn.sanmar.com
waiSkypePool01.corp.sanmar.com
sanmar.com
*.sanmar.com
careers.sanmar.com
click.em.sanmar.com
click.em.sanmar.com
*.ecom.sanmar.com
akamai-san91.exacttarget.com
akamai-san91.exacttarget.com
akamai-san91.exacttarget.com
mail.sanmar.com
orders.sanmar.com
*.sanmar.com
*.sanmar.com
sstats.sanmar.com
promotions.sanmar.com
waiacs.corp.sanmar.com
*.sanmar.com
*.corp.sanmar.com
*.ecom.sanmar.com
waiSkypePool01.corp.sanmar.com
info.sanmar.com
m.sanmar.com
akamai-san91.exacttarget.com
accessedge.sanmar.com
accessedge.sanmar.com
guest-wireless.sanmar.com
akamai-san91.exacttarget.com
accessedge.sanmar.com
*.sanmar.com
accessedge.sanmar.com
*.sanmar.com
mail.sanmar.com
mail.sanmar.com
sstats.sanmar.com
sanmar.com
*.ecom.sanmar.com
waiacs.corp.sanmar.com

Certificate

The complete raw certificate details for *.sanmar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x7S8D98zCzi0NXkDeQV
AP2lpQDU6AbWakV7WZOmFsTodzPv3yU09ZhNACHzkZ5Wp47eFqwpgZHXvMmO+7oW
WPsCbPG+lHWCG2LvVawbeGgXXuXc+B8MoRt2djwiAQ8VTcEbsPtT27tH128HRmKm
RPep1FLy+Ua+mjom3xfvJ0JSzXXzs8gH+GCuBZnLE8C7k01Ez+SKjdIS4B3zqcTM
qLDI8fz1/IJ1AJ40nYuIOphTDKS2tXLM+fvwirRymU17CkgYjPMYi5LqLkdsi1iL
ccbXv4+KWskIVsAEjCyMcjrnyiC8WMTxdgGQxw9QlAZbg+a627q0XlRdeMojLi0n
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6436576008756540877608668858816849012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issaquah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Mar Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sanmar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29681201537276545469276147671968443192061946094542132217871321877338081370611082775484202742069501837378174101756340657104706059143736882287661553516075019251271667899483104959018886814850342830075664911575692677745534509944383872927415052492563780967208735546066069184509528576937693647961857212872425954387883046109699544258755523277463077808782655827422776866792701150114326609369032168538723228217210793916756222700811253792572468944347503626797731294947684028545555320759095208377658790800165123634316057663749585110046157574221884457869106545033225888649693413867057005949653452753128386808845476011422952269721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bf259e54bb897907733345ac2e0dda3c8fbd4cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanmar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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