webmail.ciudalia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:41:f3:ef:7a:43:d4:43:2f:88:19:f2:6e:58:8f:b9:f5:1e was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmail.ciudalia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:f3:ef:7a:43:d4:43:2f:88:19:f2:6e:58:8f:b9:f5:1e
Serial Number (int): 283779457486894615024443285137009971688734
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:1a:66:7f:b0:b7:89:39:0b:8f:24:a1:a3:44:6f:49:7e:df:51:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:2e:7e:5a:28:35:1e:7c:23:91:eb:f6:03:0a:b5:97:08:5c:55:f3
Fingerprint (sha256): 91:28:86:fe:d6:48:f8:25:08:9c:52:f5:7b:e2:c1:9b:e2:be:f9:f4:45:51:09:05:aa:8c:6f:75:1d:27:90:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmail.ciudalia.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.ciudalia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ciudalia.com
ciudalia.com
cpanel.ciudalia.com
cpcalendars.ciudalia.com
cpcontacts.ciudalia.com
mail.ciudalia.com
qr.ciudalia.com
webdisk.ciudalia.com
webmail.ciudalia.com
whm.ciudalia.com
www.ciudalia.com
www.qr.ciudalia.com

Other certificates including the domain name ciudalia.com

(limited to 100 certificates)
support.zalman-it.de
mail.ciudalia.com
aplicaciones.ciudalia.com
support.zalman-it.de
support.zalman-it.de
ciudalia.com
ciudalia.com
freietermine.ruhrpott-digital-agentur.de
helpdesk.fsis.dk
ciudalia.com
agenda.ciudalia.com
support.zalman-it.de
support.zalman-it.de
termin.zweihorn.org
support.kolekto.io
support.zalman-it.de
terminbuchung.brunetticaffe.de
support.zalman-it.de
service.farmlyplace.com
ciudalia.com
bookings.ksijdar.org
bookings.ksijdar.org
support.zalman-it.de
support.eurocommand.com
ticket.swiss-prime.ch
support.yasido.com
ciudalia.com
support.zalman-it.de
intranet.ciudalia.com
bookings.amender.ch
boka-mote.yodapp.se
bookings.madebybrain.com
meet.pbmconsulting.info
support.zalman-it.de
termin.zweihorn.org
webmail.ciudalia.com
facturacion.ciudalia.com
ciudalia.com
support.zalman-it.de
ciudalia.com
support.zalman-it.de
booknow.xeotek.com
support.medlive.pt
support.zalman-it.de
agenda.ciudalia.com
book.bugkit.io
agenda.ciudalia.com
support.forexyestrading.com
agenda.ciudalia.com
agenda.ciudalia.com
book.wavedesk.be
ciudalia.com
intranet.ciudalia.com
support.zalman-it.de
intranet.ciudalia.com
whm.ciudalia.com
ciudalia.com
book.spotlightstudios.co.uk
support.zalman-it.de
ciudalia.com
webdisk.koyigam.ciudalia.com
support.vitisevents.com
ciudalia.com
ciudalia.com
support.genialcompliance.com
ciudalia.com
support.zalman-it.de
aplicaciones.ciudalia.com
ciudalia.com
cpcalendars.ciudalia.com
ciudalia.com
book.wavedesk.be
agenda.ciudalia.com
ciudalia.com
buchung.hundeschule-nasenblick.de
intranet.ciudalia.com
support.yasido.com
support.zalman-it.de
buchung.hundeschule-nasenblick.de
booking.sia-connect.com
termin.dibap.de
ciudalia.com
support.zalman-it.de
meet.pbmconsulting.info
agenda.ciudalia.com
booking.sia-connect.com
freietermine.ruhrpott-digital-agentur.de

Certificate

The complete raw certificate details for webmail.ciudalia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEXGs6jaFPCT+w+Hvtz
5s0ErcYL0rBG6TkCvQbx5zHo1OUHjECHVtdR+IbL7x9zQ7fgPQFl6R/51HEHUWzT
Z14wPQqpTcEcwZSAPyPzYcDMa4L6ML/pGOAn3UBefD8NderPzX420z/cSCrAghz7
MeX7PimUWKo9i5n42h6zwq3oRzyDl0DxjPsBqIfj1q8rqE1sUPQGPRd9SVEDjHzo
nSXmuaZyemshNiJyF9GHB9Fl/ivrUe3Ayq7ZhKmR9u6aE9dEnxcaag407fmSXJBO
p8dKYjC9Az0GEBjRe7l28iGzDrQ0tG0fmwuPSqS2SsfPbXnBiaZLfLREJ4zFnXDM
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283779457486894615024443285137009971688734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 11:02:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 11:02:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.ciudalia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23583430970162608778373122285362886525333694359156710113136588346900995254156634614987962196408868383557070609823675765783577605959317776645184693088515817800935527495695012500983400105267319909899674000849276856014564613303140657265838996629540373405045090640647760321831232705402740507720570296616921987667681881695949528145170330202351882164771479476172935207552800690820242032852657046914075966857314945027494867074660808618557554676882488078522673915940168683635900758719915282364708970744244699645748542694199597068314038636943959972236497221703137212026579151419878626733700298707762986978568611754948019932327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e71a667fb0b789390b8f24a1a3446f497edf516b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciudalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qr.ciudalia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1226d8910000040300483046022100aec7318932a06b6a480510ac608c0f9efa90ae348ab48a185bf9b26681d3fc87022100821d34c6e0773fa7a3bf9d84e6d94574027f6b32984ad03fbd6914adba456c3600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1226d8a200000403004830460221009e4b47b60f069d816296a5da48c2428315f934cdd4acc1ddf0cb11d046214a4b022100d24c0bcd743ae6448ec95304f41ef3c1b7680d73d83d2042e1592dff7a9334f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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