mailigen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:70:c1:8c:22:40:80:0b:dd:d4:3e:97:63:ad:73:51:c8 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mailigen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:70:c1:8c:22:40:80:0b:dd:d4:3e:97:63:ad:73:51:c8
Serial Number (int): 378543870507156243046660475408092484555208
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:a5:9a:a2:c7:9d:ed:39:99:02:42:39:24:69:4c:c1:a4:0e:f4:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:4e:fa:9e:f9:7d:74:6e:c6:39:1b:36:07:e4:ee:74:cc:e4:a6:ef
Fingerprint (sha256): 06:ec:cd:41:74:ff:b0:6b:94:02:79:d0:1a:a4:4f:6e:59:7c:97:7c:be:c3:f1:8c:c1:9b:ac:fa:39:44:59:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mailigen.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailigen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.mailigen.com
mailigen.cn
mailigen.co
mailigen.com
mailigen.ir
mailigen.lv
mailigen.net
mailigen.ru
signup.mailigen.com
signup.mailigen.ir
signup.mailigen.ru
static.mailigen.com
support.mailigen.com
support.mailigen.ru
www.mailigen.cn
www.mailigen.co
www.mailigen.com
www.mailigen.ir
www.mailigen.lv
www.mailigen.net
www.mailigen.ru

Other certificates including the domain name mailigen.com

(limited to 100 certificates)
backend.omega.onappcdn.com
gl.mailigen.com
gl.mailigen.com
*.r.worldssl.net
*.mailigen.com
leadersend.com
*.mailigen.com
*.mailigen.com
*.mailigen.com
*.mailigen.com
shopify.mailigen.com
signup.mailigen.com
blog.mailigen.com
url.mailigen.com
backend.omega.onappcdn.com
mailigen.com
*.r.worldssl.net
mailigen.com
mailigen.com
archive.bp.mlgn2usa.com
*.mailigen.com
jira.mailigen.com
support.mailigen.com
backend.omega.onappcdn.com
mailigen.com
login.mailigen.com
mailigen.com
*.mailigen.com
signup.mailigen.com
*.mailigen.com
list.mailigen.com
backend.omega.onappcdn.com
dev.mailigen.com
support.mailigen.com
confluence.mailigen.com
login.mailigen.com
*.mailigen.com
admin.mailigen.com
mlgn.to
*.mailigen.com
archive.bp.mlgn2usa.com
backend.omega.onappcdn.com
*.mailigen.com
jira.mailigen.com
dev.mailigen.com
leadersend.com
*.r.worldssl.net
*.r.worldssl.net
support.mailigen.com
url.mailigen.com
api.mailigen.com
confluence.mailigen.com
login.mailigen.com
archive.bp.mlgn2usa.com
shopify.mailigen.com
backend.omega.onappcdn.com
*.mailigen.com
*.mailigen.com
shopify.mailigen.com
backend.omega.onappcdn.com
academy.mailigen.com
survey.mailigen.com
support.mailigen.com
*.mailigen.com
leadersend.com
signup.mailigen.com
*.mailigen.com
shopify.mailigen.com
survey.bp.mlgn2usa.com
backend.omega.onappcdn.com
*.mailigen.com
archive.mailigen.com
mailigen.com
*.mailigen.com
*.mailigen.com
mailigen.com
support.mailigen.com
blog.mailigen.com
shopify.mailigen.com
confluence.mailigen.com
survey.mailigen.com
archive.mailigen.com
survey.bp.mlgn2usa.com
mailigen.com
archive.mailigen.com
list.bp.mlgn2usa.com
shopify.mailigen.com
jira.mailigen.com
*.mailigen.com
mailigen.com
leadersend.com
list.bp.mlgn2usa.com
*.mailigen.com
*.r.worldssl.net
backend.omega.onappcdn.com
survey.bp.mlgn2usa.com
gocd.mailigen.com
survey.mailigen.com
*.leadersend.com
admin.mailigen.com

Certificate

The complete raw certificate details for mailigen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EcZb7ofJJxsn8r1aKEp
JpqqqZk7zeq4W4zG4KtiWLWAhgar3iuc1AcV5vzm34AuilEKmMrVu2D/7zW69cjl
42SxvU1B8tbihz0kErX0/p9/cgsC/+EjJvBPgOpWBWdtEC12zu5Xq+FyZzDLiW00
4Xz/Adiezp4QHo3dSxMP9ebsWFIZPyieWWm0CxxCt48GVBPVt/CBbEl9Jj4KKhtC
WFPQbeoFR++WWQmz1J0UwHegd08DV2FVPR5sZ9bUy8cHCDfW4IA2tZIMWMpHuT2F
SUTSZdIGcU2NvxV9tXRykAQcm2LirqgoaeA1BE7uENqMXcG/5m1ksYNccB49L2K+
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378543870507156243046660475408092484555208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-27 10:59:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-25 10:59:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mailigen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29322347153787937571541650096935622723378024157653679337160899739397699468463798298128157755301651884569218817584985035822908138157266698074711518407834640279433871836729400850375268677686551282417557691648394337336829625742770079999690931960106150378131061462072585928183549073250625670696252381277133063410927989367813322970764738063790651338675883465122008916515421622240995616759527070768816970736075447268999376144918442279420488529703117992380259147723961098506655004723978542795469895398387931994531889301272413787879763096043740294434366429066327598686470855333568611893873412395738448073724122611712702725849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eca59aa2c79ded399902423924694cc1a40ef49f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigen.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.mailigen.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.mailigen.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mailigen.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailigen.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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