mail.zynimus.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3b:c1:e5:12:61:f4:f4:18:6c:b7:1a:e1:6a:4c:5b:db:10 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.zynimus.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:c1:e5:12:61:f4:f4:18:6c:b7:1a:e1:6a:4c:5b:db:10
Serial Number (int): 368783533787387763235084408693547347991312
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:e9:14:b0:d6:b6:ad:06:86:97:b3:36:9b:fd:ee:b2:b4:cd:65:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:9e:3a:06:b8:45:ed:c3:12:83:8d:07:9d:7c:2a:5e:cc:0a:8c:49
Fingerprint (sha256): e8:f3:f8:32:b5:6d:57:ff:d8:47:a1:49:ee:f0:b2:e3:92:9b:e1:5a:71:fa:78:a9:2f:9c:cb:15:78:57:03:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.zynimus.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.zynimus.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autoconfig.traxmms.com
autoconfig.zynimus.net
autodiscover.traxmms.com
autodiscover.zynimus.net
mail.zynimus.net
zynimus.net

Other certificates including the domain name zynimus.net

(limited to 100 certificates)
mail.zynimus.com
server.tanicmail.com
server.tanicmail.com
mail.zynimus.net
mail.zynimus.com
mail.zynimus.com
sni.cloudflaressl.com
mail.zynimus.net
mail.zynimus.net

Certificate

The complete raw certificate details for mail.zynimus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368783533787387763235084408693547347991312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 18:45:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 18:45:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.zynimus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846790293054303697124029428283149868506345827566469849586895628986903040240606281598257863590317143423280607051080322208567695960288716564404402307015861885410437571419592153145259836502299753815362857940934056193625973131388383188624913504554949752882877319661283303994203413717842449947446994444123177837798691639642431724811944473654172169078360710820321041077141404681645590367660907068378198599508393045599225982685466321763396170215677120985857681872758043120333811007304905614083380924507504414008290513660433467288458449293619191119120306536300402904962156221920499155434002879550679254340884867965521206306234908919234308757307795604560851610647104015789210024484473114463178263030520754683216658938652220933929961845831565884322526737493824214609717953195031862405326861623665558161613137977581537205053853057504988946444988762661671652486557880035666210523160140327881143817838868925924499270397098825674863204957868468428182533216854464843810892226970981623112007977523061848011675271633298121998624247914651530464014162408644254749612112430259803381502222610119689633384229950965956936376305312922270712978583975522123354075274667171162315298165634407076071329665064801171928718961811450770756692292913367667267509114823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e914b0d6b6ad068697b3369bfdeeb2b4cd65e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.traxmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.zynimus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.traxmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zynimus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zynimus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zynimus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5bffcade0000040300483046022100b8c7c08b4ea90f5c399e48cb5c483354b4ad0ba21caad57601282c2743fcdb28022100fff6b539036dff55ceec0b097177be51bd4ddd2e51a3cc6c0a85460dfa99e43b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5bffcaf10000040300483046022100da3f1b400ccc34505d13cc8f5779993d9634ed0d62e51e8991d62d52de340e7e022100fbf0df24ae3db064bf420f2106723dbd36ae1da8771b1785f8593eb12c4fae47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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