mail.thomasdessain.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 3a:c9:df:87:f4:79:d7:e8:39:63:ef:c0:4b:3f:cd:42 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.thomasdessain.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:c9:df:87:f4:79:d7:e8:39:63:ef:c0:4b:3f:cd:42
Serial Number (int): 78143409172895816743100976089257725250
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 22:92:74:84:5c:20:fb:10:1d:b5:41:d8:2d:49:d8:83:67:a4:4e:8e
Fingerprint (sha256): f6:a8:80:90:8e:08:4b:e1:0d:bb:55:33:db:f2:53:87:4a:64:17:db:00:10:56:a8:70:c7:7a:97:be:16:55:d7

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate mail.thomasdessain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.thomasdessain.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.thomasdessain.com

Other certificates including the domain name thomasdessain.com

(limited to 100 certificates)
thomasdessain.com
mail.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
thomasdessain.com
www.thomasdessain.com
thomasdessain.com
mail.ThomasDessain.com
thomasdessain.com
thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
www.thomasdessain.com
thomasdessain.com
mail.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
thomasdessain.com
thomasdessain.com
mail.thomasdessain.com
thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
mail.thomasdessain.com
www.thomasdessain.com
www.thomasdessain.com
thomasdessain.com
mail.thomasdessain.com
thomasdessain.com

Certificate

The complete raw certificate details for mail.thomasdessain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuimFD2v7aikAQAocHIG
3Epjs0XmwfoRw455Od/FCSLt4JjrmJvUOV9HILYo/Y7zxlw+nmMc8fVIlTwRBGEx
wwpqYul+rC2rt7JBibJipAdd70Jsynl9lNLxvJ9KsakkPkBXhJBJqzvhUuFd8Z2D
inlgUDCoHo6P3CZxPPU0xabSBCl2UJgktmu4cYD3W93U3zr2Csm99qxAfudx4geU
ufT3rHkHVAxQJi9qE4f+V7K2gwps376kFKDko3dIMzssLVh0kBDJVdV2/Mr/gJOM
Tc3LczvQBgmOKMnweaJhYxYxGktj2iDjbS0tNS4eN3c/oW52ItldhKHkMtshrAXP
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78143409172895816743100976089257725250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.thomasdessain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25109907755904740144068767140962994354854284916512876972475300344299556807942735888241029797840330777645152231367220093988624304422728966205307075750986487373136478180871224731726373416260435418216620946735806173613938464227643674464131038219521558284312573061377522488724642749892887190700919792990827256810192988564123525955451767000703045768676278875817495224270794762614129153544571069790506227566630408596516652309110257728802435047662124506016821044826967873890167509314580784321414946148520169735743425319548549001884811317904051500710979607917066821024801888794500663248248526117280342312919483434227510660947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thomasdessain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e957122780000040300463044022040c7ddfd4697ee9911b3f48e59ee2a867596b4dd3ccf4ecedc1ba2bdd7b4503002203244b72a84d763e65618edcd4f8543c6b2da24c9cf725c5ef18dfcfb4bfdfe9c007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e957122b0000004030046304402205f9abd760ba15908fb7b92dd15f4f289fe744aa1ff4df581839c91bd2be76b90022077397c521f1f9d115ad1bb6103fabce43b87765744b674847b23b7d152e5b49c007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015e957124810000040300473045022100acbb1e948742d051d2e4313f48b515d5c4383a868cb58f6fa22207761ff4bc7902203b1beb8d0df66c3fc1379839140040a55783eaa7d6cbd8a8d9c340c9bf928448
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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