micollab.ferrari.com

Issued by R3

About this certificate

This digital certificate with serial number 03:70:2e:18:03:b4:24:b3:c8:d1:1f:37:2f:51:4e:0b:c8:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=micollab.ferrari.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:2e:18:03:b4:24:b3:c8:d1:1f:37:2f:51:4e:0b:c8:dd
Serial Number (int): 299509752068476215683715101280316334786781
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:f5:ed:d8:13:b5:49:c4:18:a7:69:5b:c0:86:c5:82:27:f6:f7:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:54:c3:8c:c8:d4:2d:1c:86:de:3e:72:4d:81:45:43:4a:ca:46:60
Fingerprint (sha256): 0f:6e:35:bb:65:e3:69:63:57:53:ea:da:98:0e:d5:59:64:4d:29:38:66:65:8c:41:60:04:02:77:bc:4f:5c:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate micollab.ferrari.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for micollab.ferrari.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

micollab.ferrari.com

Other certificates including the domain name ferrari.com

(limited to 100 certificates)
ferrari.com
cdn.test.ferrari.com
magazine.ferrari.com
www.f1club.ferrari.com
registration.test.ferrari.com
static.fda.test.ferrari.com
sme-test.ferrari.com
track.ferrari.com
events.ferrari.com
races.dev.ferrari.com
hr.ferrari.com
api.ferrarinetwork.ferrari.com
gateway-new.dev.ferrari.com
factorytour.ferrari.com
ferlyn01-ext.ferrari.com
api.ferrarinetwork.ferrari.com
f142mvs.test.ferrari.com
statisticheintranet.ferrari.com
factorycollection.ferrari.com
static.ferrarinetwork.ferrari.com
store.yoox.cn
factorytour.ferrari.com
techinfo.ferrari.com
api.ferrarinetwork.ferrari.com
email.ferrari.com
booking.ferrari.com
media.test.ferrari.com
factorycollection.test.ferrari.com
classicheoperations.ferrari.com
services.dms.ferrari.com
gateway-refactoring.dev.ferrari.com
store.ferrari.com
magazine.ferrari.com
academy.ferrari.com
fcd.services.ferrari.com
weracecomic.test.ferrari.com
geolocation.test.ferrari.com
fnaleads.ferrari.com
sip.ferrari.com
weracecomic.test.ferrari.com
api.carconfigurator.ferrari.com
auto.test.ferrari.com
fnaevents.ferrari.com
www.f1club.ferrari.com
crm-extended.ferrari.com
booking.ferrari.com
carconfigurator.test.ferrari.com
gateway-new.test.ferrari.com
my-ntw.test.ferrari.com
backend-classiche.ferrari.com
static.apps.ferrarinetwork.ferrari.com
login.test.ferrari.com
races.ferrari.com
privateview.ferrari.com
ferlyn01-ext.ferrari.com
corsipilota.ferrari.com
races.test.ferrari.com
Ferrari S.p.A.
gateway-new.dev.ferrari.com
webcc.test.ferrari.com
static.ferrarinetwork.ferrari.com
preowned.ferrari.com
webcc.test.ferrari.com
museum.test.ferrari.com
cdn.ferrari.com
webcc.test.ferrari.com
preowned.ferrari.com
micollab.ferrari.com
ccpords-pre.ferrari.com
www.sf70h.ferrari.com
static.portofino.dev.ferrari.com
corsipilota.test.ferrari.com
f12015.test.ferrari.com
gifts.ferrari.com
atmm.ferrari.com
static.portofino.ferrari.com
guestwifistore.ferrari.com
news.ferrari.com
crm.ferrari.com
email.ferrari.com
geolocation.test.ferrari.com
academy.ferrari.com
login.test.ferrari.com
static.formula1.ferrari.com
www.f1club.ferrari.com
crm.ferrari.com
fnaevents.ferrari.com
micollab.ferrari.com
f142fl.test.ferrari.com
academy-test.ferrari.com
bookingsvc.ferrari.com
cms-refactoring.test.ferrari.com
aftersales.test.ferrari.com
mystore.ferrari.com
login.ferrari.com
tailormade.test.ferrari.com
ccpords-pre.ferrari.com
carconfigurator.ferrari.com
werace.ferrari.com
poscc.ferrari.com

Certificate

The complete raw certificate details for micollab.ferrari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwDf55+RPbcrTJEbNWccf
5f43IfzM1suNuKsCltSt+EXFbe4IxL3uIXZDQ+XtzGDSTPJmyVyIG3WZVXqvNLWN
+WK4xQ4nVg8jO36SxgQ+m/lFfdBDgVancMXH0QLOVrTDp3AXIf8MlS3JPtY6TAQL
bdJXRn199DowPohJGIjqB9BNKmoint4lhMs8PR9TP2VNcA1SzCXZKjS4n9GhL81d
kTReq9/mlverjlemB6zaW4JpBUXldFoMRbu5q1Kjbe1smLD1hrSRP40xVEHoI4WB
i99DlcnF4je9ppM0C26DNXDpQLiQdBEpQTgc9Dc60aAWPxStPTZ2UEtkk6v+HzFe
THMOWaKd8R30Bj8q8U7fSVhaatQ87wefFELIzRZ32oel67IL+JZjEMQnO1A6HHqG
B4qrnMcdrvdas9VrkRrmalff55DpRJDlCWscJFstD+2ICoEUaEUfT4oJceVmdGzt
8I3c8Wds6akNsRAPZeLjAegYCXtYnJQbxRh3p0A6ulmhXujja9TWyIxWAhfuaTlB
S4XcJ01ZFakxTPrE31dgJnr1EhPhkHRWhzH78w0m/prglCA7f/rcksbs+5DgQ5Sx
70YECmAQxYasUhANXqwTz3v0G98nL44yMC7hja9WvmOH9qnz0cyIRvHg9jYknfaz
1AHt1MJXkRfO2Z91qTAHv9cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299509752068476215683715101280316334786781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 12:35:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 12:35:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'micollab.ferrari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784183703834894888927690358472481998240786276278452142837187454029299874622832146527912864856474133645728037068256611719036976678437907771330759623705230752903659048096794788024128725676688943080952185134989253993795858169723364727626812527773693315786464870990449012690044560719242069932885113040831264092688189411234395355622707364738535347354401203016873069589347848758543274281135273213833554803903312669208825455290294234678446709208267952794968930846447434812698412562154393689064531923724720168854933781856846290936803232609242724875662016854698368818320404643785644026548602267822267037516285712890432779406695874590796295611485829067006029024734023297414147062345093768923020537419609338563161210210606423824683521161387256298292719295110139709938472299127192734097440442624049023877731237533510537528202354677596092371256941152165842861037169110942933233188227443054223639774936368523080297685326687286330418769143104935548677186570742553101508603484063829923195693531167327439080227620857298978765238223228092803275383564062268665037877216527585381521622581711450865411603106757389847483186504852112908964835927077554093543572993310641646970954255606953556571011640047958096312775461498050730789555713079194201988203528151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1af5edd813b549c418a7695bc086c58227f6f7d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micollab.ferrari.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0d558ab40000040300483046022100dfb20a6ebbd92dd176c4832bfcf7ed10d8a1c49e960c87c63f21ba53887dcb1f022100a932246f39eda89f99ab847f55f32c827c93cd5246b40ad0c75c8335cf8f9540007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0d558ab700000403004630440220552398b46d451d56171a0dbd641db46e0c37ba2eec11e879d6c37ba44fcedbfb02203c1f7754a8f72188e91b3c4304a5a46d7e8ecd76b877801ed4cd6a93f6fb7c0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a224e3e80ea3a9b397a25995963214a0fe4fd03f0c00825c67cad76ba204511a005ff9a83b08762c8a505507a9240c181f33e2b7bfb342bc115e6b5ad765c57236e8b881d28041122f09de64ccab1f81e333519e15818f49525f5945c3505a2dc28de678e3a7f0cc972209d1b82fe7072c0aa8d55a7bccfc4b270515f26ae80bd478416c3a3b9530f7d7f3c124bd054ebf7755dec8a8a7f8083837ca185802c7ba2eb44da4a79637c540476d4c627fc60cd57d27cdbc0fc4dacb3fdcee2f0d926d0f24702b4ce7514f961bddb48432b1bd710975dd3367c5e12da16a82a9d5faa99872947f50498a67a858edef20e5ee83574ab0f6025ab72fa9d9cc3bd7891c