webdisk.dovesciare.it

Issued by R3

About this certificate

This digital certificate with serial number 04:62:ae:4f:7a:18:ad:98:80:71:0f:1e:72:97:8a:76:af:e4 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webdisk.dovesciare.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:62:ae:4f:7a:18:ad:98:80:71:0f:1e:72:97:8a:76:af:e4
Serial Number (int): 382028514024420528434992517142275201347556
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:00:da:e0:c6:1f:14:37:09:b3:b4:ba:c9:05:f8:34:b9:42:59:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:06:80:f9:2b:fc:ed:b4:be:1a:85:24:f5:d4:08:2c:6d:4c:2d:32
Fingerprint (sha256): c7:12:b3:05:3d:b5:19:9b:ac:84:dd:74:c2:00:44:84:ae:cc:27:3a:86:a7:4a:78:cd:ca:ed:5f:d7:44:f9:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webdisk.dovesciare.it

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webdisk.dovesciare.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pistefamose.it
*.skifahrertips.com
autodiscover.dovesciare.it
cpanel.dovesciare.it
cpcalendars.dovesciare.it
cpcontacts.dovesciare.it
dovesciare.it
mail.dovesciare.it
pistefamose.it
skifahrertips.com
webdisk.dovesciare.it
webmail.dovesciare.it
www.dovesciare.it

Other certificates including the domain name dovesciare.it

(limited to 100 certificates)
dovesciare.it
mob.dovesciare.it
d8.dovesciare.it
ad.dovesciare.it
www.dovesciare.it
app.dovesciare.it
dovesciare.it
www.dovesciare.it
app.dovesciare.it
ad.dovesciare.it
forum.dovesciare.it
www.dovesciare.it
ad.dovesciare.it
ad.dovesciare.it
blogs.ta-cedt.com
www.dovesciare.it
psenecengsolnltd.com
www.dovesciare.it
ad.dovesciare.it
forum.dovesciare.it
www.dovesciare.it
www.dovesciare.it
ad.dovesciare.it
www.develop.imperiumsoft.com
dovesciare.it
dovesciare.it
mob.dovesciare.it
menu.mynuutheapp.com
dovesciare.it
www.dovesciare.it
forum.dovesciare.it
mob.dovesciare.it
dovesciare.it
www.dovesciare.it
dovesciare.it
www.juliocarlos.me
mob.dovesciare.it
www.dovesciare.it
mob.dovesciare.it
mob.dovesciare.it
dovesciare.it
app.dovesciare.it
www.dovesciare.it
mob.dovesciare.it
www.dovesciare.it
shop.dovesciare.it
ad.dovesciare.it
iphone.dovesciare.it
dovesciare.it
mob.dovesciare.it
app.dovesciare.it
www.foto.dovesciare.it
www.dovesciare.it
www.dovesciare.it
mob.dovesciare.it
app.dovesciare.it
www.dovesciare.it
magicmirchi.estore.business
dovesciare.it
ad.dovesciare.it
www.dovesciare.it
ad.dovesciare.it
www.dovesciare.it
www.dovesciare.it
sni.cloudflaressl.com
www.dovesciare.it
mob.dovesciare.it
app.dovesciare.it
www.dovesciare.it
www.dovesciare.it
www.dovesciare.it
mob.dovesciare.it
mob.dovesciare.it
dovesciare.it
dovesciare.it
forum.dovesciare.it
m.abluedot.app
www.dovesciare.it
mob.dovesciare.it
dovesciare.it
dovesciare.it
ad.dovesciare.it
t4t.dovesciare.it
ad.dovesciare.it
www.forum.dovesciare.it
webdisk.dovesciare.it
webdisk.dovesciare.it
www.dovesciare.it
mob.dovesciare.it
autodiscover.dovesciare.it
foto.dovesciare.it
dovesciare.it
www.iphone.dovesciare.it
app.dovesciare.it
agenda.judel.nl
ad.dovesciare.it
mob.dovesciare.it
www.dovesciare.it
www.dovesciare.it
www.andrzejewski.dev

Certificate

The complete raw certificate details for webdisk.dovesciare.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkHTNi1h8ynYM606w8dy
aFp7PRDdbx0RyGwoQbli/TW6x2K3m0aH0Sckw8Q/Pg4yCxIahcGqqpMAIcxZj3uk
bWqDhccN6KLp0RxU+G8bvH/tVkByr35VZHPIByCsxzYMcYJD+Vn/n+e982rz63Ih
8BIXFafe98aI/kmYtAjK8IDgYUU0xQF6iT0JCTJz+eNmGHsvTXdcY2ftbE9B1hNC
T/5vCTDi5T98IX0cHLyw2yN5mj2fyObfbCl+LcSNMd22emVoGShs6vqGsVz2ts3T
xSc7+SNllzpYFxhPp6cjOFw/5MtJIddso5ocLqGPtqFTxwxb3pXI/39ErfA2Td91
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382028514024420528434992517142275201347556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 14:57:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 14:57:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webdisk.dovesciare.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23007831043507628443233676087502216716602042360762660467501429811117881586714462361260088051748255916208222723068186217935656621746665479394844554716348930643694177189530216359504673357058544379943149795790727629352632279162553725537497190242463793707824896372541899053456828164577353188133603165398332214320978276065829725474641333039026988352252924632800302882218005827435969648776502641833500851648159258605834100609947132230148840606416979251599700844236622922921426678202085464092571499430666634017776021021861507212318365378480124924378198130684168392270168454288911628438862878238358784459202482611735721112953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f00dae0c61f143709b3b4bac905f834b94259c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pistefamose.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skifahrertips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pistefamose.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skifahrertips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dovesciare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovesciare.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2a93576b0000040300463044022030e49a90e7e85aa205c152f01e4546536a747b03d0790f84b35a498404146097022066c268f700dd8f77dfb089d1a003dcac91e981e901b8c5ef9f09ddb6f8d2056e007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2a93582c0000040300473045022068692bfaebf9deb205a6f33d0325df1be4baaca5d374e2a127b87dae01086895022100cfcc5f3a92c09010eda814f74d7507c3839e55a2813c9e5e47b646e1e9401a5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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