cpcontacts.q-mag.org
Issued by R3
About this certificate
This digital certificate with serial number 03:2b:7b:0d:f3:84:92:88:b4:65:10:fa:b6:21:64:e4:9a:23 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cpcontacts.q-mag.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2b:7b:0d:f3:84:92:88:b4:65:10:fa:b6:21:64:e4:9a:23Serial Number (int): 276132567055350800690397646901646354324003
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:60:d1:a6:6e:b2:2e:13:4a:2e:60:3a:96:e5:d3:9b:aa:eb:47:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 23:b7:b9:49:36:af:3c:29:38:bf:41:1f:95:2f:5c:1a:41:41:66:4c
Fingerprint (sha256): f6:be:79:f2:ab:32:50:d9:84:b8:d1:97:ff:cb:8a:a7:96:5b:44:94:56:cb:99:0a:e8:05:12:60:69:03:3a:c7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cpcontacts.q-mag.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cpcontacts.q-mag.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.q-mag.org
cpanel.q-mag.org
cpcalendars.q-mag.org
cpcontacts.q-mag.org
mail.q-mag.org
q-mag-org.grazian-archive.com
q-mag.org
webdisk.q-mag.org
webmail.q-mag.org
www.q-mag-org.grazian-archive.com
www.q-mag.org
cpanel.q-mag.org
cpcalendars.q-mag.org
cpcontacts.q-mag.org
mail.q-mag.org
q-mag-org.grazian-archive.com
q-mag.org
webdisk.q-mag.org
webmail.q-mag.org
www.q-mag-org.grazian-archive.com
www.q-mag.org
Other certificates including the domain name q-mag.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for cpcontacts.q-mag.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAyt7DfOEkoi0ZRD6tiFk5JojMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMjIwOTI3NTFaFw0yNDAyMjAwOTI3NTBaMB8xHTAbBgNVBAMT FGNwY29udGFjdHMucS1tYWcub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA4ucj1vVDto0EEpKB/bvdkvgzasfjb2Qa7clMOJMPhgckHPQYj8GFTtbF 6m2bp/6LAX4DVr9TCUKbzb8bxfcZGiMur5aUpUHqKSN+vgA4D8CY8RpcruHBaeWk yiMEoL5FpNPCpz8Zrlsc5y9qeK5acyGMSVqKWf8qZDtXcovkJF7aSpeNpUQROc6M s7ezoHhAjqRD2l5WEZdQytvYdLfXr3yw0cH0lMZVk06q5hNhHs1P+NWz0LQqUcyC f4vIqFoPirhhusmP2hAUAh4694GlcuoL7AehtCXLwSk9qWEGwDvtokdDBuUVNL/x kJ9G/UMkfx0o2JjbwEKsHoTz9L1uewIDAQABo4IC7TCCAukwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBSWYNGmbrIuE0ouYDqW5dObqutHpjAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCB9AYDVR0RBIHsMIHpghZhdXRvZGlzY292ZXIucS1tYWcub3JnghBj cGFuZWwucS1tYWcub3JnghVjcGNhbGVuZGFycy5xLW1hZy5vcmeCFGNwY29udGFj dHMucS1tYWcub3Jngg5tYWlsLnEtbWFnLm9yZ4IdcS1tYWctb3JnLmdyYXppYW4t YXJjaGl2ZS5jb22CCXEtbWFnLm9yZ4IRd2ViZGlzay5xLW1hZy5vcmeCEXdlYm1h aWwucS1tYWcub3JngiF3d3cucS1tYWctb3JnLmdyYXppYW4tYXJjaGl2ZS5jb22C DXd3dy5xLW1hZy5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYv2kmZgAAAEAwBHMEUCIQCclIoTMK0Qv8GDmfdWGhqifvCf2ZKD5BoIof8Q0dDt jgIgVFnpEkrnOKAUpQvXI4kL5jr+yM+gaTFtxqMG2SIdteEAdwA7U3d1Pi25gE6L MFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYv2kmZqAAAEAwBIMEYCIQDJU9vKOSrR ZpAUuhPKSTLzZOMFq8bfyEUcw5fdOFznawIhAOXiGtclvLWvqHlvs0+Qu08c8+Zf /dMM+GY/cS33BiHiMA0GCSqGSIb3DQEBCwUAA4IBAQBODJDmdN8h1UQrFSGNuXof he1L8KQllboNYXZ4B55nybKaSYZOwRUKVBlTij6hrcgCzOiicFI+3k8Vjc65KFma yAcMVlnSbigxDTLKzeRzcSKVN9tFtc9bzbTwhbpYg0ba5C9pA8ZyHvgCaQrQ1rM9 r4Pgoo9FlHE3GzGYlfh2/NcL2W6kNwyfLyyePjAKZ1OuI1tBCq91a5ycetCqvpAs Na+8R58iXYJADzUqboJqTgmA1/bKXPIRQGEpTmfToBqeAnqqJksaQjy8fC9h5xO1 k9P2g+lAoFlwEW1VnPz4j2uXfXC+RoREaw32nDK7X4TBbn1BOtBTnWlGUxkLfhOr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ucj1vVDto0EEpKB/bvd kvgzasfjb2Qa7clMOJMPhgckHPQYj8GFTtbF6m2bp/6LAX4DVr9TCUKbzb8bxfcZ GiMur5aUpUHqKSN+vgA4D8CY8RpcruHBaeWkyiMEoL5FpNPCpz8Zrlsc5y9qeK5a cyGMSVqKWf8qZDtXcovkJF7aSpeNpUQROc6Ms7ezoHhAjqRD2l5WEZdQytvYdLfX r3yw0cH0lMZVk06q5hNhHs1P+NWz0LQqUcyCf4vIqFoPirhhusmP2hAUAh4694Gl cuoL7AehtCXLwSk9qWEGwDvtokdDBuUVNL/xkJ9G/UMkfx0o2JjbwEKsHoTz9L1u ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276132567055350800690397646901646354324003 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 09:27:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 09:27:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.q-mag.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28643836303782479076759628654961821916888000099635663795103071778786492172595893812093533397723268808625841015653739455540839275858354192115656576512867098641237396501646385820415287995879405567665366181226556707587458729729509748572193860312733775580343451208262673216918704530461897587229050536233991971275444127371157869442226278785106227053236356630512454328297080877130025545496688321685131084405889947070467196080180821184055163827324502085731956809326416659225934794974731756283240929780987196590362883267352668152944433285311549918330221360400322105014690140160361576589107005889102528109144905758348427488891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9660d1a66eb22e134a2e603a96e5d39baaeb47a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag-org.grazian-archive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.q-mag.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag-org.grazian-archive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q-mag.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf692666000000403004730450221009c948a1330ad10bfc18399f7561a1aa27ef09fd99283e41a08a1ff10d1d0ed8e02205459e9124ae738a014a50bd723890be63afec8cfa069316dc6a306d9221db5e10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf692666a0000040300483046022100c953dbca392ad1669014ba13ca4932f364e305abc6dfc8451cc397dd385ce76b022100e5e21ad725bcb5afa8796fb34f90bb4f1cf3e65ffdd30cf8663f712df70621e2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004e0c90e674df21d5442b15218db97a1f85ed4bf0a42595ba0d617678079e67c9b29a49864ec1150a5419538a3ea1adc802cce8a270523ede4f158dceb928599ac8070c5659d26e28310d32cacde47371229537db45b5cf5bcdb4f085ba588346dae42f6903c6721ef802690ad0d6b33daf83e0a28f459471371b319895f876fcd70bd96ea4370c9f2f2c9e3e300a6753ae235b410aaf756b9c9c7ad0aabe902c35afbc479f225d82400f352a6e826a4e0980d7f6ca5cf2114061294e67d3a01a9e027aaa264b1a423cbc7c2f61e713b593d3f683e940a05970116d559cfcf88f6b977d70be4684446b0df69c32bb5f84c16e7d413ad0539d694653190b7e13ab