zimbra1.msqpartners.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1f:51:33:33:0f:12:eb:85:5e:ed:36:01:b7:7d:29:e9:11 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zimbra1.msqpartners.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:51:33:33:0f:12:eb:85:5e:ed:36:01:b7:7d:29:e9:11
Serial Number (int): 359105830411985610097293853617931871185169
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:f4:56:49:ad:5c:95:56:e4:1b:6e:25:9d:18:8c:b9:27:9a:7b:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:88:fd:3d:0a:7b:ab:1a:14:ce:52:63:e4:42:ee:16:6a:29:11:07
Fingerprint (sha256): 59:d6:a4:8e:1f:81:8f:76:24:c5:d7:a6:ee:1d:65:69:83:d2:c3:cb:17:12:67:0d:84:03:5b:0f:5e:b2:ed:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zimbra1.msqpartners.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zimbra1.msqpartners.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cshw.co.uk
zimbra1.msqpartners.com

Other certificates including the domain name msqpartners.com

(limited to 100 certificates)
msqpartners.com
msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
chat.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
helpdesk.msqpartners.com
mail.msqpartners.com
mail.msqpartners.com
pbx.msqpartners.com
stats.msqpartners.com
helpdesk.msqpartners.com
pbx.msqpartners.com
twentysixdigital.com
email.msqpartners.com
stats.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
email.msqpartners.com
tcr.msqpartners.com
zimbra1.msqpartners.com
cloud.msqpartners.com
stats.msqpartners.com
twentysixdigital.com
cloud.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
karisma.biz
karisma.biz
twentysixdigital.com
karisma.biz
*.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
helpdesk.msqpartners.com
orangescrum.msqpartners.com
msqpartners.com
stats.msqpartners.com
procurefest.msqit.com
msqpartners.com
*.msqpartners.com
metabase.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
karisma.biz
helpdesk.msqpartners.com
chat.msqpartners.com
nextcloud.msqpartners.com
onlyoffice.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
www.msqpartners.com
karisma.biz
mail.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
nextcloud.msqpartners.com
tcr.msqpartners.com
email.msqpartners.com

Certificate

The complete raw certificate details for zimbra1.msqpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR5HgII0MATOLFzGg7Cs
72PzKAcETGYrNECWvr/BxmpwHMRnURkanbRH8Qq7CslB/qV6v1L4yaCFRuigihyS
JExulQwY/F+pMlSdJKqh74xpL1WY5GqwI5dlm5TY8yFbSCI07FhwBYN5/rE+xxew
xPiWAqgAVGpLww8qpsHRqRZBYfOOQynHhs0KS4drZ9EXkkZPcFC2Xh39o7FfdqwB
zyW3HDBCSBJ4aPGoaE/AKUkVZJFj7Md3EMpf3QCaEtBk3yPfnW40Yy5RgT68C8KB
PKFcDZLAAIaQFCTAsrFJfsJP2EoYz9qtJTfSVlRSkqjYO/OyK8LtwziSaUztMDg2
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359105830411985610097293853617931871185169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 12:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 12:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zimbra1.msqpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23873970920197456924269078159350665614229122497410238012420881062206603172235454374785255423762873274854512989592832166504365142913948825734863129536596579030324233769624926582951632796219320699792978044229023922231000018951120896417210996498709941151775635839971749211663498514103037330655695535055387177416696924471857429471866456389320790500176721241436318290221724027646686099947190651085092858207530620759622093933003957281498821476825734609495249231156094171513104909003258555223262290037829213831117005344024330199322118314406289223262130727130208190880507732748688360873119547058641443919767673401675179636409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37f45649ad5c9556e41b6e259d188cb9279a7b6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cshw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimbra1.msqpartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e7ec34e9c000004030046304402205c02f97cf64848575862f4d06146ee455210514315c41780291d1fef13cc2ab4022078a86bc808097f54bb14cd2b5211e792781c8ddd24b2cab999032ca924b39d43007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7ec34e8d0000040300473045022100eaa4bb8351c29dd577bc7d28868e6d86c3537a714ac85714100dfc6aaff7da0902201d0c52b57364fc8010ab581a2e6ec8d92ab60ef2b3ca2409abf036f2433ce03c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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