www.linagora.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:62:0d:58:6e:aa:40:4f:29:ca:75:2b:8f:57:d5:16:d7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.linagora.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:62:0d:58:6e:aa:40:4f:29:ca:75:2b:8f:57:d5:16:d7
Serial Number (int): 340412700558004379366354367128912960755415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:64:73:1b:c8:c3:9f:8d:da:9a:4c:12:f1:24:11:b2:99:d1:c6:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 87:c8:a0:23:62:bf:aa:db:90:fc:1b:30:e5:88:31:08:6f:6d:86:b8
Fingerprint (sha256): d3:4f:49:96:2b:f6:0d:d9:87:fa:6d:43:2a:4b:36:48:59:21:d3:e9:84:5c:37:ad:66:2c:63:25:fa:0f:9d:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.linagora.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.linagora.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.linagora.com

Other certificates including the domain name linagora.com

(limited to 100 certificates)
*.linagora.com
*.linagora.com
linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
www.sielte.com.br
ci-obm.linagora.com
ci-obm.linagora.com
huabei.app
poc.linagora.com
*.linagora.com
extranet.linagora.com
zestdevelopers.com
leoneazevedo.eng.br
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
faire-simple-dev.linagora.com
www.dogan-osthofen.com
*.linagora.com
ci-openpaas.linagora.com
p2023.linagora.com
petals.linagora.com
linshare.commun.linagora.com
linshare.commun.linagora.com
forge.linagora.com
linagora.com
petals.linagora.com
intranet.linagora.com
*.linagora.com
huabei.app
www.tuune.app
linshare.linagora.com
linagora.com
linshare.commun.linagora.com
*.linagora.com
www.buckyapp.com
petals.linagora.com
linagora.com
petals.linagora.com
sycloe-aeap.linagora.com
thebrent.net
grupomkn.com
linshare-internal.commun.linagora.com
forge.linagora.com
p2023.linagora.com
linshare.linagora.com
*.linagora.com
alegoriamedia.com
linagora.com
petals.linagora.com
petals.linagora.com
research.linagora.com
cryptoiclist.com
research.linagora.com
www.puravidasoftware.com
*.linagora.com
300sunnydays.com
poc.linagora.com
linagora.com
www.linagora.com
linshare-internal.commun.linagora.com
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
www.linagora.com
faire-simple-dev.linagora.com
petals.linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
shin.gy
linshare-internal.commun.linagora.com
next-mautic.linagora.com
linshare-internal.commun.linagora.com
linagora.com

Certificate

The complete raw certificate details for www.linagora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340412700558004379366354367128912960755415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-18 14:51:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-16 14:51:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.linagora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723410628407449010352987959575598426627869591609294792100894620284758909724186190762255369232929296277248025649715376697712716460415968952149887123690580953002662159792250691524659198411451752538780935567030524932168028489935975225165295460508153961837426933577594109135389798569852670744941127888381963936497291927021441363040238121715226029468733481190299120300918309856820042760925949405980116829341321443221264718155273552414517559866235128849101489056059275106836728953824198286029054682911528791943184790813328780567893436181403447253573198559759986534795191779965516423324649134588475818194273683013810765432040842187614483957871300161800335323139899407570350144678507784021663235858803822655694139878403823662571764508839349555046214964956291922369810355098976690828685587930165744231301820921865074595107227283183838405820814370166578531547784740265600712093128436544832957998710240151186752950856893876425329407654794177596578478564786419369226443072230989462101790463993175802571669828422453400800718965331409373937232128062011127108057842331591187286176647057682057556796688370853016462267350174096812734050606896219685005109697417027523813629899214024651039824541190663547477796260688003656286253255175631273211311911127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4964731bc8c39f8dda9a4c12f12411b299d1c62e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linagora.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000179802ca24e0000040300483046022100ec6f2933e80e9592500c3ce9e19c4665e362064b3dd2b97f6d43d4f5948dfed402210095fc3804a6608f6d335a2745c7a6f9f54a11a5ca4f66080db6e835a8d6d72f4d007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179802ca2470000040300473045022043b9cf5ae3c2bc61472753b82e1a51c30e3a9ba8d1ff7e43d5efd71f724025e3022100c4f484eabccf0be7ab89fddf6f5cfb12c9fbfd93c34aa660b4dd72adddb97475
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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