testmail.app
Issued by E1
About this certificate
This digital certificate with serial number 04:72:cf:6f:1f:45:47:10:f7:4b:1f:5a:23:c2:9c:d8:6a:25 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=testmail.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:72:cf:6f:1f:45:47:10:f7:4b:1f:5a:23:c2:9c:d8:6a:25Serial Number (int): 387517060730350181245884896206000802523685
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f3:37:cf:bf:a5:57:c8:26:7a:3f:b9:3c:90:aa:a4:2d:a1:0b:b2:a1
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac
Fingerprint (sha1): cc:21:f9:19:91:ea:49:00:7a:8e:7d:f6:01:36:96:e6:e8:56:aa:e9
Fingerprint (sha256): c8:7d:f7:72:aa:d2:c2:92:97:8d:af:94:b7:c8:cb:28:09:53:6d:95:e4:45:a7:82:15:06:7e:7e:42:8f:aa:cb
Issuing Certificate URL: http://e1.i.lencr.org/
Revocation information
OCSP Server: http://e1.o.lencr.orgCheck the revocation status for certificate testmail.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testmail.app
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA384
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.testmail.app
testmail.app
testmail.app
Other certificates including the domain name testmail.app
(limited to 100 certificates)
*.testmail.app
admin.banana.services
dl.istartarabic.com
settlenotary.com
f-p.es
citrix-staging-ideacloud.forgedx.com
app.metisclub.fr
www.zbang.agency
merrylands.vetspire.com
testmail.app
testmail.app
www.hollyjfitnessapp.com
www.remindex.xyz
www.usama.engineer
test.decodedhealth.com
mobydicom.com
link.staging.urbandecay.beautyadvisors.mx
gio.bcyl.com.ar
testmail.app
app.metisclub.fr
testmail.app
testmail.app
testmail.app
dl.istartarabic.com
www.eventhive.in
www.usama.engineer
status.testmail.app
www.mainga.me
canopy.tychobra.com
www.royalland.vc
settlenotary.com
status.testmail.app
doo-rod.co
mondo-natura.org
chronikdance.com
webar.tripod-digital.co.nz
maimarae.co.nz
ycard.app
finance.solteksolutions.com.au
maimarae.co.nz
sni.cloudflaressl.com
manage.gdgjalandhar.com
www.firepixels.app
link.staging.urbandecay.beautyadvisors.mx
sni.cloudflaressl.com
closize.com
digitaltreasury.fund
vps21-test.ever.live
qieli.app
watchparty.im
blog.testmail.app
angular.pe
admin.banana.services
sni.cloudflaressl.com
finance.solteksolutions.com.au
sni.cloudflaressl.com
avantagecpo.ca
webipm.azordev.pt
imobiliariafaria.com.br
dev.dr.wellopathy.com
status.testmail.app
www.piribiri.com
hoonu.app
qa.wisdomschema.com
wordart.app
ycard.app
www.eventhive.in
www.oneteacher.com.br
blog.testmail.app
hoonu.app
testmail.app
test.prognos.se
testmail.app
www.studio-mason.it
jnpictures.com
sni.cloudflaressl.com
jeffricks.com
webar.tripod-digital.co.nz
citrix-staging-ideacloud.forgedx.com
www.testmail.app
catalyseai.com
jnpictures.com
www.hookbook.app
status.testmail.app
dorf.games
myndsit.com
status.testmail.app
ookamidare.com
smartsolutionsti.com.br
dorf.games
www.strategicfilmdistribution.com.au
www.strategicfilmdistribution.com.au
www.hollyjfitnessapp.com
www.aplayer.info
dev.dr.wellopathy.com
admin.banana.services
dl.istartarabic.com
settlenotary.com
f-p.es
citrix-staging-ideacloud.forgedx.com
app.metisclub.fr
www.zbang.agency
merrylands.vetspire.com
testmail.app
testmail.app
www.hollyjfitnessapp.com
www.remindex.xyz
www.usama.engineer
test.decodedhealth.com
mobydicom.com
link.staging.urbandecay.beautyadvisors.mx
gio.bcyl.com.ar
testmail.app
app.metisclub.fr
testmail.app
testmail.app
testmail.app
dl.istartarabic.com
www.eventhive.in
www.usama.engineer
status.testmail.app
www.mainga.me
canopy.tychobra.com
www.royalland.vc
settlenotary.com
status.testmail.app
doo-rod.co
mondo-natura.org
chronikdance.com
webar.tripod-digital.co.nz
maimarae.co.nz
ycard.app
finance.solteksolutions.com.au
maimarae.co.nz
sni.cloudflaressl.com
manage.gdgjalandhar.com
www.firepixels.app
link.staging.urbandecay.beautyadvisors.mx
sni.cloudflaressl.com
closize.com
digitaltreasury.fund
vps21-test.ever.live
qieli.app
watchparty.im
blog.testmail.app
angular.pe
admin.banana.services
sni.cloudflaressl.com
finance.solteksolutions.com.au
sni.cloudflaressl.com
avantagecpo.ca
webipm.azordev.pt
imobiliariafaria.com.br
dev.dr.wellopathy.com
status.testmail.app
www.piribiri.com
hoonu.app
qa.wisdomschema.com
wordart.app
ycard.app
www.eventhive.in
www.oneteacher.com.br
blog.testmail.app
hoonu.app
testmail.app
test.prognos.se
testmail.app
www.studio-mason.it
jnpictures.com
sni.cloudflaressl.com
jeffricks.com
webar.tripod-digital.co.nz
citrix-staging-ideacloud.forgedx.com
www.testmail.app
catalyseai.com
jnpictures.com
www.hookbook.app
status.testmail.app
dorf.games
myndsit.com
status.testmail.app
ookamidare.com
smartsolutionsti.com.br
dorf.games
www.strategicfilmdistribution.com.au
www.strategicfilmdistribution.com.au
www.hollyjfitnessapp.com
www.aplayer.info
dev.dr.wellopathy.com
Certificate
The complete raw certificate details for testmail.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDiDCCAw+gAwIBAgISBHLPbx9FRxD3Sx9aI8Kc2GolMAoGCCqGSM49BAMDMDIx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF MTAeFw0yNDAzMzAwODAyMTRaFw0yNDA2MjgwODAyMTNaMBcxFTATBgNVBAMTDHRl c3RtYWlsLmFwcDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABDKJSyfVj7ikbQCV zH3YA+u0CNmLb3nMPZGZx21fknqSqfHc0/g0EVNgVAy1kgizSrYXt++ukd3FjOUn jxeHU6ajggIeMIICGjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPM3z7+lV8gmej+5 PJCqpC2hC7KhMB8GA1UdIwQYMBaAFFrz7Sv8NsI3eblSMOpUb89Vyy6sMFUGCCsG AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL2UxLm8ubGVuY3Iub3JnMCIG CCsGAQUFBzAChhZodHRwOi8vZTEuaS5sZW5jci5vcmcvMCcGA1UdEQQgMB6CDiou dGVzdG1haWwuYXBwggx0ZXN0bWFpbC5hcHAwEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bd LIHZu7+rOdiEcwAAAY6OmGJtAAAEAwBGMEQCIBXi/GILw6ylZbqo2r+zOU4RWi3x kSpGyXfdzkoEouTuAiAJyjvyHzgvi6aZ1jLg9gbWeStDzqYP1WKqbUcQSn9bqwB3 AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjo6YYqEAAAQDAEgw RgIhAOGJIQHIGXL51uDrNGXKKr/2nviUvLCSmFbFknf+4n2hAiEAjSFEOSKm9DTM AlZ4GeZyPnVtQf5gjChWwgzdoiRDENAwCgYIKoZIzj0EAwMDZwAwZAIwfsPFiG15 8GOPd4UW1ORtqZCqwQoQXjhw+LFsp+1zwmA1PIYOGyklbQ9zkizrgMePAjBbTYmR MqUTaEp6e2OmyqaNC/dDxYCdoBK4kORZYLX1PYdeYUDu4x6OX30kh3AlP4c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMolLJ9WPuKRtAJXMfdgD67QI2Ytv ecw9kZnHbV+SepKp8dzT+DQRU2BUDLWSCLNKthe3766R3cWM5SePF4dTpg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 387517060730350181245884896206000802523685 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 08:02:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 08:02:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testmail.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 000432894b27d58fb8a46d0095cc7dd803ebb408d98b6f79cc3d9199c76d5f927a92a9f1dcd3f834115360540cb59208b34ab617b7efae91ddc58ce5278f178753a6 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f337cfbfa557c8267a3fb93c90aaa42da10bb2a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testmail.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmail.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e8e98626d0000040300463044022015e2fc620bc3aca565baa8dabfb3394e115a2df1912a46c977ddce4a04a2e4ee022009ca3bf21f382f8ba699d632e0f606d6792b43cea60fd562aa6d47104a7f5bab00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e8e9862a10000040300483046022100e1892101c81972f9d6e0eb3465ca2abff69ef894bcb0929856c59277fee27da10221008d21443922a6f434cc02567819e6723e756d41fe608c2856c20cdda2244310d0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384) . . . . [c:0|t:3|false] BIT STRING (816 bits) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19510878084995215383448687658147004124230655216098442238339830942960772537390714514146923897410324870312246019934095 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 14052799443894178896072642255758115155860534660021426970558236681258822910420045161371590165328256833735746960834439