webmail.aurl.it
Issued by R3
About this certificate
This digital certificate with serial number 04:7c:8c:77:f1:0f:3c:49:63:97:92:d9:ac:8c:f9:4e:2a:17 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=webmail.aurl.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:7c:8c:77:f1:0f:3c:49:63:97:92:d9:ac:8c:f9:4e:2a:17Serial Number (int): 390830871917241204662899349094162271971863
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 31:e0:74:27:75:b4:1d:c3:7a:11:25:52:d7:46:85:1a:a7:54:1f:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9c:28:de:46:35:71:93:bf:70:c5:d1:c9:1c:2d:cf:b8:42:d4:4c:e2
Fingerprint (sha256): b3:dd:ff:96:f1:b2:a6:17:1d:fe:86:7b:f2:6c:f4:25:90:10:27:1b:05:ad:a6:09:a4:89:12:a8:2b:7a:79:3b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate webmail.aurl.it
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webmail.aurl.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.it.sqr.co
aurl.it
cpanel.aurl.it
cpanel.iurl.it
cpcalendars.aurl.it
cpcalendars.iurl.it
cpcontacts.aurl.it
cpcontacts.iurl.it
iurl.it
mail.aurl.it
mail.iurl.it
webdisk.aurl.it
webdisk.iurl.it
webmail.aurl.it
webmail.iurl.it
www.aurl.it
www.aurl.it.sqr.co
www.iurl.it
www.iurl.it.sqr.co
aurl.it
cpanel.aurl.it
cpanel.iurl.it
cpcalendars.aurl.it
cpcalendars.iurl.it
cpcontacts.aurl.it
cpcontacts.iurl.it
iurl.it
mail.aurl.it
mail.iurl.it
webdisk.aurl.it
webdisk.iurl.it
webmail.aurl.it
webmail.iurl.it
www.aurl.it
www.aurl.it.sqr.co
www.iurl.it
www.iurl.it.sqr.co
Other certificates including the domain name aurl.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for webmail.aurl.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISBHyMd/EPPEljl5LZrIz5TioXMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjMxMjQwNDJaFw0yNDA3MjIxMjQwNDFaMBoxGDAWBgNVBAMT D3dlYm1haWwuYXVybC5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AND9VtbT2H/gCgRlv3OG802EwK3qdMuadwIcLtERJPydz+FFvvIvKtjXwjUP5qcM WT6Ya3X+HqxGr9zOZSvN2AvRnh44nz83NUDzlraXj7Dumbq5Qz9c7Ks2b5ro2Lqf fD/2Sr18PBzGh9g7M8VTDGuy3p7ksb78Ev49LO0Q09kLUi54J1/okwBuH0L+hgcY pVLS3C9YHn6jcxOVrXE7thnk9K6L1CpZ/uEvqW/vO51NvxooGvH2GMsfZJL6aytj 5SQTz3ZABhkd6w+RxuTRcDl5/JU3uKOCvtzJ+wG2MG9hsUgaZPqVfexFFiesJkCi sCtw7xDvHBAwF9ZwqAYR05sCAwEAAaOCAzkwggM1MA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUMeB0J3W0HcN6ESVS10aFGqdUH2gwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggFABgNVHREEggE3MIIBM4ILKi5pdC5zcXIuY2+CB2F1cmwuaXSCDmNwYW5l bC5hdXJsLml0gg5jcGFuZWwuaXVybC5pdIITY3BjYWxlbmRhcnMuYXVybC5pdIIT Y3BjYWxlbmRhcnMuaXVybC5pdIISY3Bjb250YWN0cy5hdXJsLml0ghJjcGNvbnRh Y3RzLml1cmwuaXSCB2l1cmwuaXSCDG1haWwuYXVybC5pdIIMbWFpbC5pdXJsLml0 gg93ZWJkaXNrLmF1cmwuaXSCD3dlYmRpc2suaXVybC5pdIIPd2VibWFpbC5hdXJs Lml0gg93ZWJtYWlsLml1cmwuaXSCC3d3dy5hdXJsLml0ghJ3d3cuYXVybC5pdC5z cXIuY2+CC3d3dy5pdXJsLml0ghJ3d3cuaXVybC5pdC5zcXIuY28wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQd ZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY8LL/IWAAAEAwBHMEUCIFYYsG8kvkMB z+iKG1PWa6dn4VyZ25DFhDIaJZeMY679AiEA6FNMd9jtJhSlmqcJ/2EOEzohoeDx 0rudtRy2dQm/bVwAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AY8LL/IXAAAEAwBHMEUCIQDPgll/5ilpr1fqgAJVIlV61Qru4CK0s7j+fj0Aq8N1 egIge837zQun+QYDh52yyXqPoqnZaF6oIXNV9+EqLmYjpcowDQYJKoZIhvcNAQEL BQADggEBABixrvcqf8Ak9Qt8zuDvic2aV3fi+1YituOERztkkQZNYhUF7UY3HpYD /o9u7xRjSIpm0Ovr9ucp7+GmJTp9k/3s8nEzaxlDtPc4h9KPIaSjeqUZyy3rqPfd +/E2BJhYPIT/f/NOcVYko8m8io9+6dsxqsCIJEtjq/yvFuRae7AN8gjM7k504Asy EUzlPl78+aSGQ1eqU+VwzfNBIFSDvFs4u8+hdNdL99qCHrly+OwYtBLJJBWQLHRa U/rw073kypkOrP6jJ/iaoo95sKyd7J/PPfUfqxHh2kkFeIVxyLcF0s4CLU5NQrZ0 0OIyKU13qBOcxZdrBZk7oSxxc+Xi8G4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P1W1tPYf+AKBGW/c4bz TYTArep0y5p3Ahwu0REk/J3P4UW+8i8q2NfCNQ/mpwxZPphrdf4erEav3M5lK83Y C9GeHjifPzc1QPOWtpePsO6ZurlDP1zsqzZvmujYup98P/ZKvXw8HMaH2DszxVMM a7LenuSxvvwS/j0s7RDT2QtSLngnX+iTAG4fQv6GBxilUtLcL1gefqNzE5WtcTu2 GeT0rovUKln+4S+pb+87nU2/Giga8fYYyx9kkvprK2PlJBPPdkAGGR3rD5HG5NFw OXn8lTe4o4K+3Mn7AbYwb2GxSBpk+pV97EUWJ6wmQKKwK3DvEO8cEDAX1nCoBhHT mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 390830871917241204662899349094162271971863 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 12:40:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 12:40:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.aurl.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26382493656171215523922553770826458370687123231844590553216398210552815730171902960601097651965938871241158821402062712465432348858890601720578962076370945117811237097243167220667910223912114268838768597988462144786937397082825694184966911528253895296192970411114328431899114527820073532302100044483496463183841789548848144695516500957659126940700180637333339138121802857899109362901764946515954499202976167072018502151924597676170500769901783821456653237156091410393933436602397876383329631878051175591648077833631971616910977119629495548632090157533657263535754789515803245730518947375631311871863649189590046200731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 31e0742775b41dc37a112552d746851aa7541f68 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it.sqr.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurl.it.sqr.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iurl.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iurl.it.sqr.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0b2ff216000004030047304502205618b06f24be4301cfe88a1b53d66ba767e15c99db90c584321a25978c63aefd022100e8534c77d8ed2614a59aa709ff610e133a21a1e0f1d2bb9db51cb67509bf6d5c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f0b2ff2170000040300473045022100cf82597fe62969af57ea80025522557ad50aeee022b4b3b8fe7e3d00abc3757a02207bcdfbcd0ba7f90603879db2c97a8fa2a9d9685ea8217355f7e12a2e6623a5ca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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