content.mailmanager.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:4e:46:46:27:29:1c:d9:d0:90:40:7f:4c:b6:65:8b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.mailmanager.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:4e:46:46:27:29:1c:d9:d0:90:40:7f:4c:b6:65:8b
Serial Number (int): 7052564460653545120847946564242924939
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e4:99:8e:7e:8a:65:58:75:8a:71:d5:84:a8:73:9d:a3:04:85:aa:80
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): c3:6a:a0:ec:a0:96:58:3a:2e:f4:8a:f6:57:54:52:82:33:74:b4:ba
Fingerprint (sha256): f0:1c:93:0f:ea:16:7b:a9:d7:7e:90:96:fd:e7:27:49:3a:b3:a9:73:35:ce:5b:d1:05:60:16:78:9a:ba:f1:11

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate content.mailmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.mailmanager.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

content.mailmanager.com

Other certificates including the domain name mailmanager.com

(limited to 100 certificates)
application.mailmanager.com
info.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
info.mailmanager.com
mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
support.feelserv.net
application.mailmanager.com
support.feelserv.net
support.feelserv.net
blog.mailmanager.com
mailmanager.com
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
content.mailmanager.com
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
info.mailmanager.com
blog.mailmanager.com
support.feelserv.net
cfapi-p1.mailmanager.com
support.mailmanager.com
support.feelserv.net
blog.mailmanager.com
sam.mailmanager.com
support.feelserv.net
auth.mailmanager.com
support.feelserv.net
mailmanager.com
cfapi-p1.mailmanager.com
support.feelserv.net
mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
auth.mailmanager.com
www.mailmanager.com
support.feelserv.net
support.feelserv.net
rcs.mailmanager.com
blog.mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
mailmanager.com
sam.mailmanager.com
mailmanager.com
content.mailmanager.com
rcs.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
support.feelserv.net

Certificate

The complete raw certificate details for content.mailmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx38WP32876SJTRMT34Z2
gUDjHSuH88unAs78quZ2mWsMfNwJpQqXaFV23+KEmH4Dup7/6/AGEPWVgNUnu5TP
TGms4A0s9g2BU+aZppso7fqh+MBaP4DRPxHC6sHuXdm9ZDG+I/D8GQvMVpM3YTNU
mCwE16Et7y3667PfUCgj5QOflmRfMJUCUz6p04Z/X12DrJBtwTOaOAR/4hY7Bbx2
ZySJsn2EqBEy+7hKKCEzJt2FCbSTx7cxx1lSYkSykwDozHvMg4D7tO0rmmAt0rFf
q7/k23NXmuPA+OHDF/OPg3soxS+mths3mm72WlUYxPDJW/a/uhbJNt//gN4MVAuz
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7052564460653545120847946564242924939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.mailmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25184091577442835343595129321232870369760151348535720063773027770259250199048017012986474408853246231264091020975841687644650606703777929238176767211575014129161137583810975494678364344881431782860480717846547006756478568503976567043338973641853560659807853558016425268520378403079169784671886320781315202032437497319662074887298187470575794851430512235790256620162121294515731448743327929369889123815055291972063540969134468096647382335098494510663279689752514404013287246447918669025214688170381913583174299368294164935392332395341803997236906763662856835544524368294481995532506336851658859174753144056662085841757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4998e7e8a6558758a71d584a8739da30485aa80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mailmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005e5ce8bf609f2777355d2f5c5424309533b90a19a2fb0ccd6d5819f9df5670eb2dc706de26cae3f70385e6c9af779aaba0dbad07fa731d83cbfbc8637e668d1475c2b37823ab43e2dc7d699e48bdf6ca3c5a64c19ba29bdb826941c3d5ed669ff7ea4fbf35e99486d884dd64974da1af0b2fea554d4b59e68a8de93d6269fd0ae7f4d19f8f25ce6c0ded566dfc45eb3a1ea18f889fba530b6e1aa18b82f9baa99ac3d85db71e79204a365db95d6dfd9a85629677b7f558a98e36204b50c7d750fa38fe9a5b6c218ffbe272b21c4bb018f6cfcb332bd599375a8de46a48a4f327a9116a6a9f16bdfb2e0347cb35b17fb275406b95bae9996031c3d2976204415b375922798ed983f5f06069e45eaff24c43c3a80afb738f8c93a356e71c5e18ed20fd73e900f7935de397adf7e11344efc410db929b33f90bb26695445ee495d036870e02000e276ddfae070be78779c2ae8800f82132a253370598b5314f367c45ef3e00507cba87be4762c7e106bfd4100b6f23887b69bf2385a53120ac2a39b6ec654cbb4f2e91e2cc20054d16e2ab9d0950457b9a92773541f0cfa85671fa3e0f7ad5a6d6e3f707f0601398c3678cc3b23095e17aaa796d157e2e8dfadcf91cd51ea524d0363802449c1162dac3f8686b1f6891125b610a053988e5f45918d8dfd3f0b94ccaeaed30c26c5b2f1ef6ddc68744621f337890ec24bb195613e0