webdisk.godalive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f5:ba:52:40:ef:13:12:44:c7:a1:ae:67:8a:77:3d:10:0d was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webdisk.godalive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:ba:52:40:ef:13:12:44:c7:a1:ae:67:8a:77:3d:10:0d
Serial Number (int): 344953701183484705471895040648338873323533
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:8d:12:3a:b9:39:a3:d9:72:61:a9:bd:3c:14:53:47:a7:61:b3:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:8c:f0:dc:e6:9d:29:0d:a3:af:a5:44:e2:df:c7:fa:23:1c:48:88
Fingerprint (sha256): 82:88:93:fe:a4:5b:32:01:79:c4:c5:15:cc:e6:a7:ae:c1:89:e1:40:fa:62:1d:8e:bd:57:1f:15:26:85:12:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webdisk.godalive.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webdisk.godalive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.godalive.com
autodiscover.julianoramos.com
cpanel.godalive.com
cpanel.julianoramos.com
cpcalendars.godalive.com
cpcalendars.julianoramos.com
cpcontacts.godalive.com
cpcontacts.julianoramos.com
godalive.com
godalive.uxqueen.com
julianoramos.com
julianoramos.uxqueen.com
mail.godalive.com
mail.julianoramos.com
webdisk.godalive.com
webdisk.julianoramos.com
webmail.godalive.com
webmail.julianoramos.com
www.godalive.com
www.godalive.uxqueen.com
www.julianoramos.com
www.julianoramos.uxqueen.com
www.younit.uxqueen.com
younit.uxqueen.com

Other certificates including the domain name godalive.com

(limited to 100 certificates)
uxqueen.com
godalive.com
younit.com.br
uxqueen.com
godalive.com
godaliveapp.uxqueen.com
autodiscover.godalive.com
www.godalive.com
cpcontacts.julianoramos.com
uxqueen.com
webdisk.godalive.com
autodiscover.julianoramos.com
uxqueen.com
godalive.com
godalive.uxqueen.com
centralderetiros.com.br
julianoramos.com

Certificate

The complete raw certificate details for webdisk.godalive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDSehj499K7OCdhZrBTA
rBYhxAp6rkmsHesmf6s9XTNQ2BpHMYMj09g4s26+AnHvgZVhPtRizEftiImAR6SK
vTIn9ekBkcw8jwQY4Shiy4wWYn5iPmODenUcokkv/BDstDzi4XKYQjo7opxNWz8v
UqDAie93LViyqeSHTjuxeLELC0fT3NUhGlCblT3dpVMyAs/3jW+qnjBYofRj0wCA
a2wD2J4Vl7UJc3emc48dxF0Ngv2RZjMXq6VzqTYX+iE0+rHMp1Z+sNH2OxJIvJF3
RITJRZJMwGk0l/McSMR/dt/A/rrYCw9MJDRcVHrHbXv1m9n5X5+2ve/0XCXSjVNy
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344953701183484705471895040648338873323533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 06:48:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 06:48:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webdisk.godalive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24263702065776481369316148515860892378966238677039377096445642329577676158835025112802596203874595105011035364572472082077565068663162021799375717820744265354724928907876363113679131535257913110166886511541700138830618548647553344287153132232319309856072958282714754800136633854317288398388198656013131651019494624272964661894339419183902780334114166391673466267286507744069480345447762888177620861727747005270626634211402793386030913706382578536422869884109018159285840390586398724598065813003160963302853091301320638485903726853791053863037890173932684161650941766326951169993387373659223655665074934196288219214403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							128d123ab939a3d97261a9bd3c145347a761b3a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godalive.uxqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julianoramos.uxqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.godalive.uxqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.julianoramos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.julianoramos.uxqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.younit.uxqueen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'younit.uxqueen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf0da91da000004030047304502210097211bddc010b50a8d0adc762d0e35c1815837cca06091c36486ffb0a4347cec022077915491b28a4c7c76af16d02502f68a030597396c73d528fee1f4c84e67a9a400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf0da92530000040300483046022100837eeb6679f6800aef3c2dd34704d4e0d53941d7f09b43ce743f29316f2d227b022100f7feb6016b60f20f36ae3243b03e953b3b08131ee22e79b58fc4911998de4be7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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