live.tq.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a3:16:f2:69:cb:b5:f4:46:27:99:ad:73:9e:7d:7b:2a:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.tq.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a3:16:f2:69:cb:b5:f4:46:27:99:ad:73:9e:7d:7b:2a:98
Serial Number (int): 403945671232693627178310502083788485110424
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:64:e3:4d:fa:b4:a7:58:4d:e3:06:97:da:07:4b:42:9f:c3:67:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:ef:01:0d:11:30:05:47:64:2e:2b:48:3b:23:be:f5:f0:c2:ff:11
Fingerprint (sha256): 83:ab:01:f0:36:86:38:4e:ca:ae:c5:ff:d4:8c:36:aa:dd:44:6b:93:b8:a4:ad:54:7b:5d:25:eb:5b:16:66:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate live.tq.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.tq.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.tq.co

Other certificates including the domain name tq.co

(limited to 100 certificates)
www.cowingtonpost.tk
www.dteam.cloud
seehait.me
www.aifortuneteller.com
sptutors.com
www.expertdataconsulting.com
myrentokil.com
yellowstar-qa.mobilenxt.app
www.b.pukket.app
www.squeeeezed.com
link-dev.flextechdev.com
chiesadelsoccorsonoicattaro.it
staging.investhumber-netzero.co.uk
www.tamostudy.com
go.tq.co
www.outil.online
app.getminerva.co
chat.gammal.tech
crm.tq.co
staging.investhumber-netzero.co.uk
www.inspirally.com
tq.co
admin.tq.co
waitingtime.io
zffd.imcanada.cc
ndaby.club
smartians.com
go.tq.co
mobile.modlingroup.com
svcdevelopers.com
tq.co
guide.skhomebuyersguide.ca
borisgauty.com
www.tq.co
sharetime.love
tour-feedback-dev.powerproleasing.com
tq.co
home.tq.co
coreysmith.me
upload.zal1000.com
live.tq.co
www.blinc.pl
geopop.io
nearestneighbors.io
my-records.dev
next-api-beatjump.opalastudios.com
tq.co
flightschool.swift.co
omaeha.dev
www.b.pukket.app
tq.co
*.tq.co
www.titop.fr
community.tq.co
zippyxpress.com
www.earlymarkers.com
admin.acc.tq.co
sazava.infopanel.plus
www.outil.online
www.koplesh.co
soonspins.com
ketogeniczna.com
reactv.app
patrikelfstrom.se
www.funteractive.app
api.community.tq.co
stackon.app
sigrist.dev
coreysmith.me
vsestroiki.ru
tq.co
www.funteractive.app
patrikelfstrom.se
surreyexpress.ca
sales.maghrebsteel.net
stg.cpa-web-questions.app
www.surakh.com
go.tq.co
marketswift.com
onedrawtwo.com
reactv.app
gecina.beeldi.com
links.gemspot.welory.com.my
jeroengoudsmit.nl
app.indiagold.co
beta.noah.mobileappster.co.uk
www.dteam.cloud
www.linkki.xyz
2014.bloggi.es
guide.skhomebuyersguide.ca
tools.cloudparker.com
live.tq.co
live.tq.co
api.tenstars.co
leyendasmexicanas.elitesolutionspro.com
go.tq.co
bagnabarhhighschool.org
admin.iesa.pecas2b.com.br
www.tbonza.com
hakobune.retro-ink.com

Certificate

The complete raw certificate details for live.tq.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30rDKsExWw6Wxdp39dX
+oiZGcisPdlobrN7JcvTJd/WhAYQ0dZgcUt2c6HGzJtsiVTRu7XilxhhrAYivh6d
543wdAYVhYasTFhHbYL7uTXaEuLQIc1hcGEG5gMqzREz/4ODey1xV+b+hC6x4zkT
Innvs1Y/sKKPUBqGoHFnnJZaVYbC6a4Ld9yd1VyKOa9EJxpsLNLJzZDCB6SiQx70
51BB+PYXdmzr/xkBCUOOgONdPpfiuAHX09zbfr0DZ799L2f81gJfyKqSMRqQDpnq
sxNNss2ovgxuPvtFYNxdWCSQGHxEw+AvgCcMHjjO4Qu2UuHVkRv3DBTssN7x0psI
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403945671232693627178310502083788485110424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 17:00:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 17:00:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.tq.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25688098629253569891790345855547050131801070801416459594700980143973744906144283617610917988810993202499924496555121485890974966531130467351058847110076261585541123930575397346955336879828900742573655710393604459051380918634646447442574057523293545975631005419514776721971564446606786177884446196074251738249136899697711459218624428745979489075584579233809478261535211543760832288384120564011560821440571902205137578776317787989408577276682621593790128399616819948658690339393162079090743989293285589199863169441907151321384458863646616462297428829324622010057085903233730792662359017871616866013249810268210878679081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca64e34dfab4a7584de30697da074b429fc36791
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.tq.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001702b1c2a9f000004030047304502207cbcfb4e1c03a9562ff45d74f7d81fc7c14e134a1f7d6e7c44b5c8b9269a9c7b022100ea6012df46ed17bebea1a958ba130a02ad42b7ad767c03ba0977b9560b3a7449007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702b1c2a8b000004030046304402205964a31554d5ea4a02c697772cf8b4292cf7eaef8324a0e09a27c0b73d4341ce0220242eb8f507faf0e7809bc2cdfce336e45023a9b6ce677e760dc6c8287c310bc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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