magnasoft.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:76:fe:d1:b2:e9:a5:86:28:05:42:22:e9:ff:b5:6f:33:43 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=magnasoft.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:76:fe:d1:b2:e9:a5:86:28:05:42:22:e9:ff:b5:6f:33:43Serial Number (int): 301828889821704579566734767133940656321347
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f4:d1:44:68:5f:7e:70:9c:6a:e4:38:cc:3f:a5:31:c8:b6:cf:32:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5c:23:ea:d1:52:60:0c:0f:ec:e1:14:b9:54:6f:9e:0b:99:f8:1f:8b
Fingerprint (sha256): 25:d8:f1:54:77:88:c3:a7:2b:c9:d1:43:c0:7f:b1:f2:b6:0c:7b:42:fa:72:58:c2:cf:8d:f6:a7:14:13:92:f7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate magnasoft.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for magnasoft.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
magnasoft.com
www.magnasoft.com
www.magnasoft.com
Other certificates including the domain name magnasoft.com
(limited to 100 certificates)
magnasoft.com
hr.8greens.com
hr.soov.io
hr.8greens.com
myhr.packetviper.com
hr.8greens.com
people.ukintelligent.co.uk
mone.magnasoft.com
people.jaago.com.bd
magnasoft.com
people.atlasdigitaltech.com
hr.8greens.com
magnasoft.com
magnasoft.com
magnasoft.com
rh.attatlas.com
hr.nuwattenergy.com
*.magnasoft.com
*.magnasoft.com
people.loba.com
myhr.abbaci.com
hr.8greens.com
magnasoft.com
hr.8greens.com
*.magnasoft.com
mail.vytulmagazine.com
people.mfinjury.com
magnasoft.com
*.magnasoft.com
people.justice.plumbing
people.tyfone.com
magnasoft.com
hr.8greens.com
myhr.proviniti.com
rh.numericys.ca
*.magnasoft.com
mail.samarthngo.org
hr.medicliq.health
esm.centralpafoodbank.org
magnasoft.com
*.magnasoft.com
employees.mdsco.ae
magnasoft.com
*.magnasoft.com
hr.8greens.com
*.magnasoft.com
hr.8greens.com
myhr.packetviper.com
mail.vytulmagazine.com
magnasoft.com
*.magnasoft.com
*.magnasoft.com
hr.8greens.com
hr.8greens.com
esm.centralpafoodbank.org
hr.8greens.com
hr.8greens.com
hr.soov.io
hr.8greens.com
myhr.packetviper.com
hr.8greens.com
people.ukintelligent.co.uk
mone.magnasoft.com
people.jaago.com.bd
magnasoft.com
people.atlasdigitaltech.com
hr.8greens.com
magnasoft.com
magnasoft.com
magnasoft.com
rh.attatlas.com
hr.nuwattenergy.com
*.magnasoft.com
*.magnasoft.com
people.loba.com
myhr.abbaci.com
hr.8greens.com
magnasoft.com
hr.8greens.com
*.magnasoft.com
mail.vytulmagazine.com
people.mfinjury.com
magnasoft.com
*.magnasoft.com
people.justice.plumbing
people.tyfone.com
magnasoft.com
hr.8greens.com
myhr.proviniti.com
rh.numericys.ca
*.magnasoft.com
mail.samarthngo.org
hr.medicliq.health
esm.centralpafoodbank.org
magnasoft.com
*.magnasoft.com
employees.mdsco.ae
magnasoft.com
*.magnasoft.com
hr.8greens.com
*.magnasoft.com
hr.8greens.com
myhr.packetviper.com
mail.vytulmagazine.com
magnasoft.com
*.magnasoft.com
*.magnasoft.com
hr.8greens.com
hr.8greens.com
esm.centralpafoodbank.org
hr.8greens.com
Certificate
The complete raw certificate details for magnasoft.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgISA3b+0bLppYYoBUIi6f+1bzNDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDcxNDQ2MThaFw0y MDA3MDYxNDQ2MThaMBgxFjAUBgNVBAMTDW1hZ25hc29mdC5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcqHYLbzYQdCGFouvXM5aZJfiTOu3BX87 QAFxUreIiiH41W7lvGdPwqW225Ql0qvD0PA8+nXXSOY2DoHzxfUhR/YNkbxJDZPs vR2MnwUk8zMl2XMws3Zj7gtDGii7D+KOptnaSXALMnN6EH3wgQKtMnakIGFK7bT5 OeczA2/3UHCuR7cVfNZcU6ALRuT/ufBDMWuMSOlYc6I9FANGWIDOUZfGWiPc9YO8 eo+qDmWC5GFJs/0VTWe3GCmIsJKxvE+aZdLIqIhkL+8gan/8yoqg0avp7uNkT5BN deilr2/O6X9piVonL3lCousLtBDSq4ccFYN8EIZH9kDQUpEPQvRzAgMBAAGjggJ3 MIICczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPTRRGhffnCcauQ4zD+lMci2zzLO MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wKwYDVR0RBCQwIoINbWFnbmFzb2Z0LmNvbYIRd3d3Lm1hZ25hc29mdC5jb20w TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3 BIH0APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXFVUiIC AAAEAwBIMEYCIQCo9GQdXiQiFETTkJIp7e7neo7XEztjEL5jiCEBaDgMhQIhAMJF bQqQFq5zLhYG/AunYeBcRmKRpcpoAIRLs6QGnjPIAHcAsh4FzIuizYogTodm+Su5 iiUgZ2va+nDnsklTLe+LkF4AAAFxVVIh9wAABAMASDBGAiEAwWjLssyD0HGnJTZB oajqcQUodJfUFIpBG2VMdbSLdPsCIQDhAAhryJXGx/phZnbbrN4BqxYX925YRhaH opj7MeLcXTANBgkqhkiG9w0BAQsFAAOCAQEAE5Q/j2bmsex9QdxbcMfv1Rlpw0BX JG2pLIHOOBLS92QFYesE72gS5mAm2A7zJI7zWo5iSxgXgbZSLG20twUV8Qae23d5 7vj5Xx61eVQ9xmfOZQCp0xjzh3QalxVjtdG2W6RznC3IfK/e651lH1kYWr55/dyi CqYRqwxz4PmGcfdqu/Jf9pQhcY7GkiVdhy94OH7hcij5KUIEOOT/t3yU991PSlVN 9YT5Q0hiYs3SiZZ+lOldG5T1XxfTG2GdUwTGkb37qgXDw5Wl2TBYMFSg9ygpVL6f xQUCxirDnCfazlO8yqidI+uyBSo2/ghgWWChfGhKXKwkio7yP/eymp7oQA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnKh2C282EHQhhaLr1zO WmSX4kzrtwV/O0ABcVK3iIoh+NVu5bxnT8KlttuUJdKrw9DwPPp110jmNg6B88X1 IUf2DZG8SQ2T7L0djJ8FJPMzJdlzMLN2Y+4LQxoouw/ijqbZ2klwCzJzehB98IEC rTJ2pCBhSu20+TnnMwNv91Bwrke3FXzWXFOgC0bk/7nwQzFrjEjpWHOiPRQDRliA zlGXxloj3PWDvHqPqg5lguRhSbP9FU1ntxgpiLCSsbxPmmXSyKiIZC/vIGp//MqK oNGr6e7jZE+QTXXopa9vzul/aYlaJy95QqLrC7QQ0quHHBWDfBCGR/ZA0FKRD0L0 cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301828889821704579566734767133940656321347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 14:46:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 14:46:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magnasoft.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25051711630302628325084707617771889710484714202902909423160195304547134424717787533799351324061908364423157344170801721351084611297725260674613552111717790239427294797704799118787914005793444674294336864307603409735178532402607543986412001151553349419420081626265506097039883028283149842934700828793103325328248281263464091174362079123893272402311391002765227298002250415661581186244854690246437077227143376491081113769488665445268892745587312098724553931616564099040524140967519116689159694467269404461724106880706980790735444878336993823242508133846744597755662941718031307099503117042572814617524139885727905412211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f4d144685f7e709c6ae438cc3fa531c8b6cf32ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnasoft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasoft.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000171555222020000040300483046022100a8f4641d5e24221444d3909229edeee77a8ed7133b6310be6388210168380c85022100c2456d0a9016ae732e1606fc0ba761e05c466291a5ca6800844bb3a4069e33c8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171555221f70000040300483046022100c168cbb2cc83d071a7253641a1a8ea7105287497d4148a411b654c75b48b74fb022100e100086bc895c6c7fa616676dbacde01ab1617f76e58461687a298fb31e2dc5d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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