webmail.bodrogkoz.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ae:6f:76:d0:6d:cd:77:f3:23:79:72:f8:3a:58:5a:39:fc was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmail.bodrogkoz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:6f:76:d0:6d:cd:77:f3:23:79:72:f8:3a:58:5a:39:fc
Serial Number (int): 320694150865526122065028982951527579269628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:c9:91:65:5d:e6:8a:67:44:ec:ac:6b:67:02:23:14:2e:40:c6:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:24:26:fa:6e:2d:b9:a5:54:b5:69:be:92:22:2a:59:e2:1c:f4:66
Fingerprint (sha256): 2a:b8:95:db:f8:4b:d6:08:f9:ab:86:b7:42:6c:fa:18:dd:ec:c9:1a:d4:e9:20:5a:4f:01:21:54:ef:06:38:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmail.bodrogkoz.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.bodrogkoz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.bodrogkoz.com
bodrogi.bodrogkoz.com
bodrogkoz.bodrogkoz.com
bodrogkoz.com
bodrogkoz.ns01.biz
cpanel.bodrogkoz.com
cpcalendars.bodrogkoz.com
cpcontacts.bodrogkoz.com
mail.bodrogkoz.com
webdisk.bodrogkoz.com
webmail.bodrogkoz.com
www.bodrogi.bodrogkoz.com
www.bodrogkoz.bodrogkoz.com
www.bodrogkoz.com
www.bodrogkoz.ns01.biz

Other certificates including the domain name bodrogkoz.com

(limited to 100 certificates)
bodrogkoz.com
webmail.bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
www.bodrogkoz.ns01.biz
bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
bodrogkoz.bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
bodrogkoz.com
bodrogkoz.com

Certificate

The complete raw certificate details for webmail.bodrogkoz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudB13b6xuErMaMjjmBv+
ZoT5d2MRfFH+WS1U1hn6yaIYk4rU6d0gWsD2bXEn0qi3ff6xrn1yX27zEDdQo1WH
+aC3vZ1eRYAg0C8cqOrTexRIH4u0gNPV3ODwa2iNNBMtIXr2efPGkM/8y8kKFbI5
0och3UWr59N7tdzI891ccZEXvGtnNLzHGxBh5BMRQeGsZ83EHUvUra3WhAVvylRb
aZ5WWEiGPD5Sex1YS/lSZrSMG4xxfDN0HYn3U9wvRX94QQOImhlLC1rZYady1q0k
m0m88jMhEKAWLY4oY2pyx03o0ocJfFTa5cC/KLZ2ws/a49zdVyjxwmLEzn0LrXIC
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320694150865526122065028982951527579269628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 09:03:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 09:03:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.bodrogkoz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23456882080509769645976271109175400170863659001236926833928890543244992372120007599917167881499000652055286483854874193849933117815385298513477800538794488881584706359752905124025221179631557451194209808361846368857156462478239073921766120494858643677697267538445267058397551822093131297379453280172054054315464644520757779989775081181488174403047822888737974901942360424759057162383502147001721931193550592000606300585044086745798735173450743812385349973656970294350224964138848207415260091686145152465724243221501611627847798486007416236657654997146247921845652043177569613843757652618624513198652663873058603401771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4c991655de68a6744ecac6b670223142e40c650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (355 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodrogi.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodrogkoz.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodrogkoz.ns01.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodrogi.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodrogkoz.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodrogkoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodrogkoz.ns01.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e321e6d170000040300473045022100813f0aa87d8578cceb43523304e5070a775fcbf5db01b309aab5e34962e3e3140220676837413f4e35aac9b9ddcf8cc0e18ab8a3c5c68b801f5f05ca9ddfdedb90d5007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e321e6d120000040300473045022100bf90fa84800f250cce0e00782683cd45bc9b6b56398e5607fb1552d3bd3b28bb022056e48021914105a18638417fc2c06e80f24c5728f673b5e165fbbf5f883c415b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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