linagora.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:e6:f0:12:d4:66:22:d0:9b:aa:77:37:4c:99:e3:21:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=linagora.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:e6:f0:12:d4:66:22:d0:9b:aa:77:37:4c:99:e3:21:3d
Serial Number (int): 407965244543472211116879011057147517804861
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 67:cb:86:81:3a:da:0a:cb:38:ff:b8:21:cd:e8:29:8a:4d:02:d9:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:80:2a:81:ed:5f:29:15:a3:4b:42:3e:8f:5d:15:25:7c:75:18:f3
Fingerprint (sha256): 6e:2c:20:fb:fb:9f:98:25:b9:80:85:e7:7f:d5:33:57:8d:0a:3d:29:f6:74:cb:89:4a:4d:f0:61:62:f6:d0:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linagora.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linagora.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

linagora.com

Other certificates including the domain name linagora.com

(limited to 100 certificates)
*.linagora.com
*.linagora.com
linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
www.sielte.com.br
ci-obm.linagora.com
ci-obm.linagora.com
huabei.app
poc.linagora.com
*.linagora.com
extranet.linagora.com
zestdevelopers.com
leoneazevedo.eng.br
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
faire-simple-dev.linagora.com
www.dogan-osthofen.com
*.linagora.com
ci-openpaas.linagora.com
p2023.linagora.com
petals.linagora.com
linshare.commun.linagora.com
linshare.commun.linagora.com
forge.linagora.com
linagora.com
petals.linagora.com
intranet.linagora.com
*.linagora.com
huabei.app
www.tuune.app
linshare.linagora.com
linagora.com
linshare.commun.linagora.com
*.linagora.com
www.buckyapp.com
petals.linagora.com
linagora.com
petals.linagora.com
sycloe-aeap.linagora.com
thebrent.net
grupomkn.com
linshare-internal.commun.linagora.com
forge.linagora.com
p2023.linagora.com
linshare.linagora.com
*.linagora.com
alegoriamedia.com
linagora.com
petals.linagora.com
petals.linagora.com
research.linagora.com
cryptoiclist.com
research.linagora.com
www.puravidasoftware.com
*.linagora.com
300sunnydays.com
poc.linagora.com
linagora.com
www.linagora.com
linshare-internal.commun.linagora.com
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
www.linagora.com
faire-simple-dev.linagora.com
petals.linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
shin.gy
linshare-internal.commun.linagora.com
next-mautic.linagora.com
linshare-internal.commun.linagora.com
linagora.com

Certificate

The complete raw certificate details for linagora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407965244543472211116879011057147517804861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 04:01:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 04:01:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linagora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1012592982386376136720930586139400093721340656408403659889531681730848118352288155832865194342683939330934271369914039873955755572587993853187604813548355761439591679485714010905415334955257749656734691938754892407675504784138552196583119506671040635650663590340455565143512664802236299452030004241137276753363923138033706497408499141318896051955039642773286895582432617730224311170206759963658447950411805027243483698474862528781322780984298798731674731028699936785488208468607414985566602578813006465160305309170394803594442280224218442147222185680039537635144920889012890483873361520980117264633034631701169072353967939757872686767909180175203019885048554028680820419407038603238856275570982336151063290876513138553029521954595593199247445275939710068141338488218594413274353844348768268377883702120776663168746056717606384899714072042523747712922512548283061837726661141496405740961378784521999449910879634616632307923372814302811324309292223427353299530248376453763808353547709834920920777405026267932632684065488047894833545465132830818856322570472364880405286806376923948944398271763857075447615438669377152447528327705803731736011202324495694821012477218290258523202567160269335415908219607937166356275583094670347215679374687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67cb86813ada0acb38ffb821cde8298a4d02d930
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linagora.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018594e7a3080000040300483046022100f630772426bcb91ce5d51746eeca86f49c2f186a4028027f5836f104e914554402210087a3b98a5df36cbf960a156480774b90be0493aee6638c33a60c69da1a1d14ca0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018594e7a46b0000040300483046022100bf0b541c35fcb6b091d945aa247e899ffbfc770ce712e21c8d6c3e2439443e7f022100af70201dfab3221b723060a53fc7e6a2170f466602d51885500eadcd3aa3031b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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