cpcontacts.q-mag.org

Issued by R3

About this certificate

This digital certificate with serial number 03:2b:7b:0d:f3:84:92:88:b4:65:10:fa:b6:21:64:e4:9a:23 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcontacts.q-mag.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2b:7b:0d:f3:84:92:88:b4:65:10:fa:b6:21:64:e4:9a:23
Serial Number (int): 276132567055350800690397646901646354324003
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:60:d1:a6:6e:b2:2e:13:4a:2e:60:3a:96:e5:d3:9b:aa:eb:47:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:b7:b9:49:36:af:3c:29:38:bf:41:1f:95:2f:5c:1a:41:41:66:4c
Fingerprint (sha256): f6:be:79:f2:ab:32:50:d9:84:b8:d1:97:ff:cb:8a:a7:96:5b:44:94:56:cb:99:0a:e8:05:12:60:69:03:3a:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.q-mag.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.q-mag.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.q-mag.org
cpanel.q-mag.org
cpcalendars.q-mag.org
cpcontacts.q-mag.org
mail.q-mag.org
q-mag-org.grazian-archive.com
q-mag.org
webdisk.q-mag.org
webmail.q-mag.org
www.q-mag-org.grazian-archive.com
www.q-mag.org

Other certificates including the domain name q-mag.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.q-mag.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ucj1vVDto0EEpKB/bvd
kvgzasfjb2Qa7clMOJMPhgckHPQYj8GFTtbF6m2bp/6LAX4DVr9TCUKbzb8bxfcZ
GiMur5aUpUHqKSN+vgA4D8CY8RpcruHBaeWkyiMEoL5FpNPCpz8Zrlsc5y9qeK5a
cyGMSVqKWf8qZDtXcovkJF7aSpeNpUQROc6Ms7ezoHhAjqRD2l5WEZdQytvYdLfX
r3yw0cH0lMZVk06q5hNhHs1P+NWz0LQqUcyCf4vIqFoPirhhusmP2hAUAh4694Gl
cuoL7AehtCXLwSk9qWEGwDvtokdDBuUVNL/xkJ9G/UMkfx0o2JjbwEKsHoTz9L1u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276132567055350800690397646901646354324003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 09:27:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 09:27:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.q-mag.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28643836303782479076759628654961821916888000099635663795103071778786492172595893812093533397723268808625841015653739455540839275858354192115656576512867098641237396501646385820415287995879405567665366181226556707587458729729509748572193860312733775580343451208262673216918704530461897587229050536233991971275444127371157869442226278785106227053236356630512454328297080877130025545496688321685131084405889947070467196080180821184055163827324502085731956809326416659225934794974731756283240929780987196590362883267352668152944433285311549918330221360400322105014690140160361576589107005889102528109144905758348427488891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9660d1a66eb22e134a2e603a96e5d39baaeb47a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.q-mag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf692666000000403004730450221009c948a1330ad10bfc18399f7561a1aa27ef09fd99283e41a08a1ff10d1d0ed8e02205459e9124ae738a014a50bd723890be63afec8cfa069316dc6a306d9221db5e10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf692666a0000040300483046022100c953dbca392ad1669014ba13ca4932f364e305abc6dfc8451cc397dd385ce76b022100e5e21ad725bcb5afa8796fb34f90bb4f1cf3e65ffdd30cf8663f712df70621e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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