q-mag.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:3a:11:e3:15:3e:89:3a:48:46:d0:cc:df:37:3c:62:70 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=q-mag.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:3a:11:e3:15:3e:89:3a:48:46:d0:cc:df:37:3c:62:70
Serial Number (int): 297143694420571524226629610423199238742640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:0f:e8:0a:11:01:1b:d9:10:22:b2:f8:6f:09:df:93:00:c6:50:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:99:a0:d9:23:07:71:48:4a:d5:16:d3:ce:3b:c1:3f:5c:5f:21:ac
Fingerprint (sha256): 0b:cd:0c:b8:82:8b:dd:0b:97:d8:1e:78:2f:07:2b:e5:39:f5:f3:22:16:12:3b:6b:43:ab:4e:5a:e9:99:87:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate q-mag.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q-mag.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2011-living-archives-conference.grazian-archive.com
2011-q-conference.com
2011-q-conference.grazian-archive.com
americashistoryretold.grazian-archive.com
mail.2011-q-conference.com
mail.metron-publications.org
mail.naxos-home.com
mail.q-mag.org
metron-publications-org.grazian-archive.com
metron-publications.org
naxos-home.com
naxos-home.grazian-archive.com
q-mag-org.grazian-archive.com
q-mag.org
www.2011-living-archives-conference.grazian-archive.com
www.2011-q-conference.com
www.2011-q-conference.grazian-archive.com
www.americashistoryretold.grazian-archive.com
www.metron-publications-org.grazian-archive.com
www.metron-publications.org
www.naxos-home.com
www.naxos-home.grazian-archive.com
www.q-mag-org.grazian-archive.com
www.q-mag.org

Other certificates including the domain name q-mag.org

(limited to 100 certificates)
2012-q-conference-naxos.grazian-archive.com
q-mag.org
2011-q-conference.com
q-ency.com
cpanel.q-mag.org
q-mag.org
q-mag.org
cpanel.q-mag.org
q-mag.org
q-mag.org
webdisk.q-mag.org
www.q-mag.org
q-mag.org
q-mag.org
q-mag.org
cpcontacts.q-mag.org

Certificate

The complete raw certificate details for q-mag.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxOH0a1f0U/1hI93c1ki
9HQcv3ayMTXsAoUMR01BSIYIcGZXitJBgxsq89jtsodzBkgzSmRX26XBhDiLgJsX
ZRSNT2Idnl7zjMWvrc2w2JvJyjJr+ClvEZpbxcaZGxmbuGpJJbxZBnhCzIoyUy3V
hTbQmdwRhDtKT7n1kie1FKuaUULa55wq4u+hfs4Nw23eBsmxXZE4k2EwOfDsRUGX
XZJ23zqsygLlV/IZJAVzC1KoRZszbcNKtEQpt39jHTvxwcviZMYih+JQXidHGpWm
H0zXxqpL0Qx1i0wkmYqpDm7T8oqasOSj7pASOPla2DDP1Mmzmsbo8Y5r03Y5G0Wo
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297143694420571524226629610423199238742640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 13:19:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 13:19:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q-mag.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24121147118302164112168303400568242888696050490377714240974773196077727318020167202978331997463881775740667342618007706176382512784952419766833785614398820596729740129387612308861495082144176111974808311978587340838624606940897933335680569431974004822568518142645405034602357482876136646220928636776924620122697262642717258761600979262013332076213994664026804147698871267680317266706002710354609341050908302064719327520855410482767347535247255789956214786745686578578768406642672150679940828853965899401009476316243077167767277849536522652294211980085465998078424305021942746678833391813807212877520269273032638703643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc0fe80a11011bd91022b2f86f09df9300c650ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (775 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011-living-archives-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011-q-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011-q-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americashistoryretold.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.2011-q-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.metron-publications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.naxos-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metron-publications-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metron-publications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naxos-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naxos-home.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2011-living-archives-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2011-q-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2011-q-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americashistoryretold.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metron-publications-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metron-publications.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naxos-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naxos-home.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016943ec74db0000040300473045022061c8e3f7efa536cecbefc0ce4105a82055e095a4c5aa0dc3709b27afa4d6ad01022100f425dce12a62598801a42282cdc3e2a850746abc1dd11af941f1dc42674759ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016943ec771b0000040300463044022002ad761fdab85e65130e1b764e694afb09107d73880262dd2217b8f5af638261022067be49ccf60d487e9f5cae1ac55bfc91f5054660c84b24f335a55e8a9c17ca03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074f0608a6289a2483609c8a0c74ff2905f079bd6a2e74af00c27e8f126306d3c58e0d077c482b9f51ec3289086ea560b9fe2fa661c5d493ef2716583896d9af4996e4b5565f67075cbcaa917746ee2200db87d43c607e81c12daaaa5c165366e9724910f51774d6d32a25156f8604c9d9e687990d3d3b8dbe0e5e78fa8086ce761b399bb021c68ba044150ba869fc7fde1c5268e49a1c51a2fb0b56565d30048f27151f7c1f4911aa6a52862420375b7a79adf7f1caa4177446766e0edd2ca9f788430433b36f0add225bf774513c38ad88334586e4e1907a0d34a789a7e83a884f1f241f808ff593574ebb99827767e8f703102005097e954c8edccb5ca03e3