podl2.ithinkupc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:7f:f1:f5:a4:9a:e6:0f:06:26:cc:56:e7:fe:3e:03:02 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=podl2.ithinkupc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:7f:f1:f5:a4:9a:e6:0f:06:26:cc:56:e7:fe:3e:03:02
Serial Number (int): 282264150458697287782853386057428393394946
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:d1:23:cb:e7:30:92:c9:e8:0a:d9:db:fd:46:a4:fa:f0:d9:18:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:6f:c3:a7:12:2d:d5:02:38:36:6c:88:2a:25:b5:14:19:88:d7:96
Fingerprint (sha256): 16:ad:05:5c:10:8e:89:64:6e:65:08:ad:b7:3a:57:22:95:e5:56:72:dc:4c:1a:2d:07:27:c6:0c:38:83:30:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate podl2.ithinkupc.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for podl2.ithinkupc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

btec.cat
comissionscic.extranet.gencat.cat
comissionscic.upcnet.es
dracnew.ithinkupc.com
edualter.org
govern.copc.cat
lcms.upcnet.es
podl2.ithinkupc.com
portals-externs.upcnet.es
transformarelmon-guia.edualter.org
www.btec.cat
www.edualter.org
www.transformarelmon-guia.edualter.org

Other certificates including the domain name ithinkupc.com

(limited to 100 certificates)
podl2.ithinkupc.com
atenea-externs2.upcnet.es
lamp3.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
atenea-externs2.upcnet.es
lamp4.upcnet.es
podl2.ithinkupc.com
podl.ithinkupc.com
atenea-externs2.upcnet.es
alec.upc.edu
atenea-externs2.upcnet.es
pod.upcnet.es
podl.ithinkupc.com
podl2.ithinkupc.com
podl.ithinkupc.com
lamp4.upcnet.es
pod.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
atenea-externs2.upcnet.es
pod.upcnet.es
lamp4.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
podl.ithinkupc.com
comunitats.ithinkupc.com
podl.ithinkupc.com
podl.des.ithinkupc.com
podl.ithinkupc.com
lamp3.upcnet.es
secure0050.hubspot.com
podl.ithinkupc.com
secure0050.hubspot.com
atenea-externs2.upcnet.es
secure0050.hubspot.com
atenea-externs2.upcnet.es
norris.upc.edu
podl.ithinkupc.com
pod.upcnet.es
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
gestor.upcnet.es
pod.upcnet.es
lamp3.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
ulearn.upcnet.es
podl.pre.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
secure0050.hubspot.com
lamp3.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
secure0050.hubspot.com
atenea-externs2.upcnet.es
podl2.ithinkupc.com
gestor.upcnet.es
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
*.ithinkupc.com
pod.upcnet.es
podl.des.ithinkupc.com
pod.upcnet.es
secure0050.hubspot.com
lamp3.upcnet.es
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
norris.upc.edu
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
gestor.upcnet.es
podl.ithinkupc.com
gestor.upcnet.es
podl.ithinkupc.com
atenea-externs2-2.upcnet.es
ulearn.upcnet.es
podl.ithinkupc.com
pod.upcnet.es

Certificate

The complete raw certificate details for podl2.ithinkupc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqEQQ/kSFQAfCidIQrDp
qgIOnZlAccqMWl/ZIOZgLc0xFSKmio6yMQ6INuVJvM9wcNNj1jHlwaRXXT6ZCBxK
gKTXH6c67sSKh9YOcaVx1IMVW8qtUiBDiJwCcIV5VW2d0eGuJoBpj2cNUCCKtQTW
/6B+UsAs9DsHWnNfe0Sf9wXHAGoRqCa3Vn6QXt0gGkjlQWRXRvxqtEj5+l6jpXKT
UPolFVftnVQdXPuuQDmFvrFkVzpBKM96Ri9yc/7ma/C+YSFVLZviyJtNacjU4cr/
brL1H3HpMiaKGm0ClIGPC8ylZn5zQl8ADoi8Gm79hAaF/t1gQTvRj8UD2Jk6I6Z+
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282264150458697287782853386057428393394946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 02:04:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 02:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podl2.ithinkupc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25074607773615645971199962725241450927640835683316007576521405510045706957830684461236867492636688087834299524884953493471975374815232663991954744242348260650126033468559793391640433233813654476588974731140067949074181712869068052942593097495611868036758232024119240693193211206805109685617283500906864455422044310692948300677151946294868418021506978562089855505245842833938582277723669971147202385343501602736962414249386555472663535310191489444330303124065086801014277285033280178015021031024675265501194107805605190811971960604916381338312052461299745730606675283993717788884141477174865188673961170726310960856733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99d123cbe73092c9e80ad9dbfd46a4faf0d918c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btec.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comissionscic.extranet.gencat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comissionscic.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dracnew.ithinkupc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govern.copc.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcms.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podl2.ithinkupc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portals-externs.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformarelmon-guia.edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btec.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transformarelmon-guia.edualter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5a7dd9980000040300463044022046da682dd436bc78541863d46b87359b4b440c892abbf1d87e249744ae7484110220721ea2caf6033b016429ce28880ce555353e78a59135300896fed5098e82718f007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b5a7dd990000004030046304402203077cd8dc8b8761d00af0fb61ff4923da6dcf4449c43bc393f34caa6f21810ff02201f143ab34bf1ab52d6668c6c1ad16bc018d77ce50557ac357d15b2d294d8aa6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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