podl2.ithinkupc.com

Issued by R10

About this certificate

This digital certificate with serial number 04:e2:3e:28:b0:0c:e3:50:a6:63:6e:51:81:d5:cc:ea:95:36 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=podl2.ithinkupc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e2:3e:28:b0:0c:e3:50:a6:63:6e:51:81:d5:cc:ea:95:36
Serial Number (int): 425435582049511264296350630811304972686646
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:18:45:92:c4:b1:84:b5:c7:15:15:5f:3a:27:32:f9:09:54:70:a5
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): ee:32:aa:17:57:b1:41:eb:74:b9:e1:16:a3:2d:84:1d:0b:5e:4d:c1
Fingerprint (sha256): 4b:df:9b:a9:e8:4f:ae:a7:ab:d0:e4:df:19:e8:ff:5c:e3:56:fb:89:f9:c2:86:c1:3f:9d:0e:d7:76:f1:b1:7a

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate podl2.ithinkupc.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for podl2.ithinkupc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comissionscic.extranet.gencat.cat
comissionscic.upcnet.es
drac.uic.es
edualter.org
govern.copc.cat
lcms.upcnet.es
podl2.ithinkupc.com
portals-externs.upcnet.es
transformarelmon-guia.edualter.org
www.edualter.org
www.transformarelmon-guia.edualter.org

Other certificates including the domain name ithinkupc.com

(limited to 100 certificates)
podl2.ithinkupc.com
atenea-externs2.upcnet.es
lamp3.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
atenea-externs2.upcnet.es
lamp4.upcnet.es
podl2.ithinkupc.com
podl.ithinkupc.com
atenea-externs2.upcnet.es
alec.upc.edu
atenea-externs2.upcnet.es
pod.upcnet.es
podl.ithinkupc.com
podl2.ithinkupc.com
podl.ithinkupc.com
lamp4.upcnet.es
pod.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
atenea-externs2.upcnet.es
pod.upcnet.es
lamp4.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
podl.ithinkupc.com
comunitats.ithinkupc.com
podl.ithinkupc.com
podl.des.ithinkupc.com
podl.ithinkupc.com
lamp3.upcnet.es
secure0050.hubspot.com
podl.ithinkupc.com
secure0050.hubspot.com
atenea-externs2.upcnet.es
secure0050.hubspot.com
atenea-externs2.upcnet.es
norris.upc.edu
podl.ithinkupc.com
pod.upcnet.es
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
podl.ithinkupc.com
gestor.upcnet.es
pod.upcnet.es
lamp3.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
lamp3.upcnet.es
ulearn.upcnet.es
podl.pre.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
secure0050.hubspot.com
lamp3.upcnet.es
podl.ithinkupc.com
atenea-externs2.upcnet.es
podl.ithinkupc.com
secure0050.hubspot.com
atenea-externs2.upcnet.es
podl2.ithinkupc.com
gestor.upcnet.es
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
*.ithinkupc.com
pod.upcnet.es
podl.des.ithinkupc.com
pod.upcnet.es
secure0050.hubspot.com
lamp3.upcnet.es
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2-2.upcnet.es
atenea-externs2.upcnet.es
podl.ithinkupc.com
norris.upc.edu
lamp3.upcnet.es
atenea-externs2.upcnet.es
atenea-externs2.upcnet.es
gestor.upcnet.es
podl.ithinkupc.com
gestor.upcnet.es
podl.ithinkupc.com
atenea-externs2-2.upcnet.es
ulearn.upcnet.es
podl.ithinkupc.com
pod.upcnet.es

Certificate

The complete raw certificate details for podl2.ithinkupc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7PVgT5itw3/d2UJRtZc
E3CcXAoUs2OXE7L3LwFgY5baKlFmLGUeKvEGgXe1C+Q4VGxvLX5u/F3dOVIEyuzs
hLI+VnS4/GZZUIVO/QHekzilbVvpSKbaS1E466XjFE7zAIVrYgrjiBhYC9zBwr84
psst8E50cDQFsrEB9GbEEvmdfdpoayTBg5dhECoPYSZEm3sRMcawSHAdf0GqGqvO
zQJl8Ld9URmN0pzvNGdk2LlyVf1VclygcbJVWQgooTExs3LtV7qY0xZwOkHYNmja
wfuQo+8dWB7nYAuN4schuD2ArAckaE015IV1zlWGaqxjS/sS3lsP4fkIE1n5Q8nZ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425435582049511264296350630811304972686646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 02:04:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-15 02:04:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podl2.ithinkupc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25715055360291345335125389706578172414525393572208558383191723973688526095696704726342959276331997788369613730671751534260949630204071567777993986939790965825106897888757617216995098549820026329160189228694802593710999421908594116251312987659801777197385622622450358717144397526181267237177585141932481375380879797861110543062771599705824886403062148624802237044250444531705080828558408295652359890384906553983103598669568712494278056071493166546859929341041139862920392393893777510449999765004787495421496452061145022740496312102262202391194507244918263676315102694287566021548373286845578965711339234856303627721199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9184592c4b184b5c715155f3a2732f9095470a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comissionscic.extranet.gencat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comissionscic.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drac.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govern.copc.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcms.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podl2.ithinkupc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portals-externs.upcnet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformarelmon-guia.edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edualter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transformarelmon-guia.edualter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019024274a4f0000040300473045022100dcc791d58eeed149872e4bdfcf19a59bdd625918f890d1291c3e9bf76de18da602200e2317071971c8a45212a58d29b0f7f88279a500b5ddd1bd829c52ba3a7f25fa007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019024274b4000000403004630440220551ab10f86610a929d2bc3eb6f11bcfbecbd44667e8178a53a2e6ba29d4c26670220234ac92f45043ced8714ab7bfc48d9b5490ef0a684a1f1fd578b6dfcbe869bf3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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