otstcfq.pqm.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:33:1d:5c:4e:ab:d9:f2:b9:12:1c:01:78:1b:07:a6:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=otstcfq.pqm.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:33:1d:5c:4e:ab:d9:f2:b9:12:1c:01:78:1b:07:a6:aa
Serial Number (int): 283863437088671272379848989286986729105066
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:4f:72:c6:cb:bc:d7:ec:d5:1c:07:40:f9:e2:bf:41:ab:ad:59:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:dd:bb:db:e6:e2:27:c5:20:d9:d4:fb:05:91:2b:4b:e2:06:72:be
Fingerprint (sha256): d3:3c:cd:fe:0a:35:e1:e1:22:b9:82:e5:0c:2a:a6:53:6d:6e:73:2e:e4:91:76:5d:0f:04:d9:0a:69:12:7a:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate otstcfq.pqm.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otstcfq.pqm.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otstcfq.pqm.net

Other certificates including the domain name pqm.net

(limited to 100 certificates)
facteuriel.pqm.net
isaca.pqm.net
www.pqm.net
corp.pqm.net
blog.pqm.net
facteuriel.pqm.net
corp.pqm.net
otstcfq.pqm.net
*.pqm.net
facteuriel.pqm.net
mx04.pqm.net
ssl.pqm.net
webcasts.pqm.net
blog.pqm.net
secure.pqm.net
mx04.pqm.net
mx02.pqm.net
mx04.pqm.net
temps.pqm.net
isaca.pqm.net
isaca.pqm.net
isaca.pqm.net
webcasts.pqm.net
temps.pqm.net
ssl.pqm.net
webcasts.pqm.net
mx03.pqm.net
isaca.pqm.net
secure.pqm.net
blog.pqm.net
www.pqm.net
corp.pqm.net
hubspot.pqm.net
hdondemand.pqm.net
blog.pqm.net
*.pqm.net
blog.pqm.net
www.pqm.net
hubspot.pqm.net
isaca.pqm.net
corp.pqm.net
blog.pqm.net
ssl.pqm.net
blog.pqm.net
SECURE.PQM.NET
secure.pqm.net
temps.pqm.net
pqm.net
pqm.net
secure.pqm.net
SECURE.PQM.NET
pqm.net
hubspot.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
hubspot.pqm.net
blog.pqm.net
*.pqm.net
postfix.mx03.pqm.net
www.pqm.net
ssl.pqm.net
corp.pqm.net
webcasts.pqm.net
SSL.PQM.NET
corp.pqm.net
webcasts.pqm.net
webcasts.pqm.net
secure.pqm.net
temps.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
mx04.pqm.net
ssl.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
SSL.PQM.NET
secure.pqm.net
corp.pqm.net
www.pqm.net
otstcfq.pqm.net
secure.pqm.net
secure.pqm.net
SECURE.PQM.NET
mail.pqm.net
hubspot.pqm.net
corp.pqm.net
secure.pqm.net
blog.pqm.net
mx04.pqm.net
blog.pqm.net
hubspot.pqm.net
pqm.net
webcasts.pqm.net
mx04.pqm.net

Certificate

The complete raw certificate details for otstcfq.pqm.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wevz71+mCHXb6Hch9i
Pdomck7oTCYUrYQHSCHJATbZWme/o0hHJcSOpOvszTizBZzQzvQlvjtv/sEFsO1q
xekiZve0yT2NSQclgQtq4lKRgXsuCCfayIch5hWg3/0XHILqlTHqCOo3r7A/sJ4M
MWmX2yn+VTsuiYqpphZL2M02n58h0X4G76/qFnMDKJWtv4YL/txWVnh9vwfDK7uN
ib6xG4aMG/XcA/m5MiffdxRzjiANQkQf3pj+DhWAyXhEt02Mb53/m0grbHG9BJis
oQbnuhgsRLSywGXre76yEbXaH+VP3iWQD49pNSVekz+xBKjG863plLRFClMcf8Pl
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283863437088671272379848989286986729105066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 03:03:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 03:03:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otstcfq.pqm.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24654005691487158056617520096466995090999166349577819190235400413255028080159510021360996649962328768725697045096737012340076181073062537895685392774061822982116612434841453227549983265344704208802430385630444245709093451579262961907672211753828680227859831159248344373505206910568522222652829935079199290639068826090918785841546962071993013305682771248814228200135149664363560677950674487741056082339844925881955094303788330543438911203643881652765025300428634542352165160843761000082229593031811875873521039919317147798848617880569040737162144914638053303931183628572739918393699658906147393724250487416122553656599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d4f72c6cbbcd7ecd51c0740f9e2bf41abad59f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otstcfq.pqm.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016df1a24e0a0000040300473045022014050fa9a399ad69cac6ad0fcc8de90a1010c76cf4336495770b2e91ad268f17022100e503a8a52a2ded940f75176820a171c40eb742aa3f91aa8d85dc66ad71bde0cb00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df1a24e350000040300483046022100dab1e5e4b1e0f2ef642bfe97a5d78f17125c366bb078efb27647ad1b6917228d022100c6d59ddac1d60903f3cbf8a645ac39caf8bdd30cd30cdff130be59ebfc07f333
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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