www.msqpartners.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:06:e0:4c:bf:62:d1:3a:77:3f:99:24:47:3f:a7:61 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.msqpartners.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:06:e0:4c:bf:62:d1:3a:77:3f:99:24:47:3f:a7:61
Serial Number (int): 19974123058247615776890882987506247521
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:b8:27:e3:aa:39:a7:7f:f5:25:3c:55:94:1f:91:14:19:18:e2:e8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 63:69:4b:b9:63:8e:b4:66:6f:19:88:c8:6d:34:ff:fb:00:7a:07:9f
Fingerprint (sha256): 7b:5e:9f:b4:09:8f:37:34:8f:f3:14:8f:d7:bc:26:c5:ca:49:85:39:a1:3d:21:6b:5b:c5:92:8f:c8:4b:90:7b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.msqpartners.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.msqpartners.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.msqpartners.com

Other certificates including the domain name msqpartners.com

(limited to 100 certificates)
msqpartners.com
msqpartners.com
tcr.msqpartners.com
email.msqpartners.com
msqpartners.com
stats.msqpartners.com
msqpartners.com
chat.msqpartners.com
msqpartners.com
*.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
helpdesk.msqpartners.com
mail.msqpartners.com
mail.msqpartners.com
pbx.msqpartners.com
stats.msqpartners.com
helpdesk.msqpartners.com
pbx.msqpartners.com
twentysixdigital.com
email.msqpartners.com
stats.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
mail.msqpartners.com
stats.msqpartners.com
email.msqpartners.com
tcr.msqpartners.com
zimbra1.msqpartners.com
cloud.msqpartners.com
stats.msqpartners.com
twentysixdigital.com
cloud.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
karisma.biz
karisma.biz
twentysixdigital.com
karisma.biz
*.msqpartners.com
msqpartners.com
helpdesk.msqpartners.com
www.msqpartners.com
helpdesk.msqpartners.com
orangescrum.msqpartners.com
msqpartners.com
stats.msqpartners.com
procurefest.msqit.com
msqpartners.com
*.msqpartners.com
metabase.msqpartners.com
msqpartners.com
zimbra1.msqpartners.com
karisma.biz
helpdesk.msqpartners.com
chat.msqpartners.com
nextcloud.msqpartners.com
onlyoffice.msqpartners.com
helpdesk.msqpartners.com
msqpartners.com
www.msqpartners.com
karisma.biz
mail.msqpartners.com
mail.msqpartners.com
*.msqpartners.com
nextcloud.msqpartners.com
tcr.msqpartners.com
email.msqpartners.com

Certificate

The complete raw certificate details for www.msqpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsmK8URRsqGLU+tVNi3n
pD1bpONFjh+weODc9LVRCSzNtGHwRPxZmaFjonfJWHk+xbJKd4K+hmn/ruJB5bFJ
VYC3ocHlCNT3N5/JtoyuY6eoxre6P2pkf4vIU1lPl+oPphO2QT+Rq7HkRMapsFbm
Z6YoHvYi/QBMXCqjC3IFL/tbj8V9FjWbCbmFycJe6dEouwiszrQoS/YVpLNb8lyD
MpXao2NIQSVJsJMih2tBKT5+9pH5Taah2lVHYjfpTLeL7EmlHzs+A13CESTRV3lm
lxOISWoNgxReWAKHjIoRoCStlu1XYxR+yNYQzpScYveJZjgssg8rFjCCKz+FHxVV
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19974123058247615776890882987506247521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.msqpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23074755934968107000919130610906038700191991511044576519222734453080552236342784019907479068445740664923756627982657788538920633589775608733068216019408852686952437385340710549859390060752988893172963066987034797149076673795229734998431359788867889198098912174881069868663918467293936355725344434913154904366523281963664256818703467035646140644330839930496759066169018704334031714577811771715425544502638472379089278717424454975665089933517960739083631797117530256839621641859894937871598489867700044090404272101329386375189201038709926737314209801615628933626044041833620803318951104103228153485457235163465066566969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b827e3aa39a77ff5253c55941f91141918e2e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msqpartners.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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