email.msqpartners.com

Issued by R3

About this certificate

This digital certificate with serial number 03:33:3a:4e:4d:51:1f:60:23:f9:bb:ce:a8:e1:03:a9:19:91 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=email.msqpartners.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:3a:4e:4d:51:1f:60:23:f9:bb:ce:a8:e1:03:a9:19:91
Serial Number (int): 278768760299331823320594027479780691614097
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:5c:4f:28:97:6b:fc:bf:94:1c:cb:f4:da:5b:4d:e0:3d:b9:9c:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:94:5e:fb:81:96:92:1c:b8:57:5b:98:3d:aa:d8:54:6a:40:7f:d1
Fingerprint (sha256): 0b:9e:4c:0a:0c:47:59:79:43:b2:38:04:73:a9:6d:d1:13:25:5a:08:43:41:f5:92:54:6b:9b:fe:bd:79:83:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate email.msqpartners.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email.msqpartners.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.holmesandmarchant.com
autodiscover.lloydnorthover.com
autodiscover.msqpartners.com
autodiscover.smarts.agency
autodiscover.stackworks.com
autodiscover.steinias.com
autodiscover.thegateworldwide.com
autodiscover.twentysixdigital.com
email.msqpartners.com
ms-200-mail01.mediasquare.net

Other certificates including the domain name msqpartners.com

(limited to 100 certificates)
msqpartners.com
msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
chat.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
helpdesk.msqpartners.com
mail.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
helpdesk.msqpartners.com
twentysixdigital.com
email.msqpartners.com
stats.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
email.msqpartners.com
tcr.msqpartners.com
zimbra1.msqpartners.com
stats.msqpartners.com
twentysixdigital.com
helpdesk.msqpartners.com
msqpartners.com
karisma.biz
karisma.biz
twentysixdigital.com
karisma.biz
*.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
orangescrum.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
karisma.biz
helpdesk.msqpartners.com
chat.msqpartners.com
nextcloud.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
www.msqpartners.com
karisma.biz
mail.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
nextcloud.msqpartners.com
tcr.msqpartners.com
email.msqpartners.com

Certificate

The complete raw certificate details for email.msqpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278768760299331823320594027479780691614097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 08:02:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-23 08:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email.msqpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4539841662345306077772961447485109875241190177350670288171849369474099234622189834996374561693466483332693036775130559097956933378587278535349982497492722504736850417924392535261843796145466548468816772089247691247821508832316129300376402139665031099337484166752492381906790212669922953530575391500016393558419882559303637410549278492931755378188632817370847736402684308070786748759609668850262381604003196970435525441083258335118750809479032949755665513599081654410727558708220480493606836144024081837519149507436831964726517796238638722502079374024324260045226254873473167010450306876460711136981096655670066268498185506826280176180557820606661789331589925364710632264384199061897532857975176008763830169951545708732866878839632749243335505715889026960611498166621392425813809252829284469161608247204683602662789774132910390536452179683935805515216152205205900740353086549917128723869122244389538941474018039727543265596529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db5c4f28976bfcbf941ccbf4da5b4de03db99c4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.holmesandmarchant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lloydnorthover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.msqpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.smarts.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stackworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.steinias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thegateworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.twentysixdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.msqpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms-200-mail01.mediasquare.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000177c8f989420000040300463044022032e79b829381c1efc44e3554ceff9f157087ae08b68b349f029cf83f10b1360b022028e604a5a82447457c618a54c5072dca6b853196357bfb85461f8e884060e00f007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177c8f98b0500000403004730450220318bc4de045273da2531cce8d21bd33956f1b1365e3fb7d0ba2939611759f23702210089c6e06d73180c3c6bcabbd376f5f7faa6211c41468fa598405bc3e0a15bf3ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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