📋 chkcert — EQMJOKERPRD.kdb

Generated: 2026-06-02 18:14 UTC | Host: check-certificat | Source: /home/joker/Tools/certificate/kdb/EQMJOKERPRD.kdb | 7 certificate(s) 📅 ref 2026-06-02

Certificates

#	Label / Alias	Subject	Issuer	Serial	Key	Signature Algorithm	CA	Key Usage	Extended Key Usage	Subject Alternative Name	Basic Constraints
1	ibmwebspheremqeqmjokerprd	CN=eqmjokerprd.pbgate.net,O=Credit Agricole SA,ST=Île-de-France,C=FR	CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB	`badfd44469f869025be0f9bfc603b556`	2048-bit RSA	sha256WithRSA	Leaf	DigitalSignature KeyEncipherment	serverAuth clientAuth	DNS eqmjokerprd.pbgate.net	present CA: False
2	ibmwebspheremqeqmjokerprd_2023_1	CN=eqmjokerprd.pbgate.net,O=Credit Agricole SA,ST=Île-de-France,C=FR	CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB	`f78f768b06d832faa95c1d80d9d6f980`	2048-bit RSA	sha256WithRSA	Leaf	DigitalSignature KeyEncipherment	serverAuth clientAuth	DNS eqmjokerprd.pbgate.net	present CA: False
3	sectigo_1	CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB	CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB	`1`	2048-bit RSA	sha1WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
4	sectigo_2	CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB	`3972443af922b751d7d36c10dd313595`	4096-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	none	none	present CA: True
5	sectigo_3	CN=Sectigo RSA Organization Validation Secure Server CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB	CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US	`137d539caa7c31a9a433701968847a8d`	2048-bit RSA	sha384WithRSA	CA	DigitalSignature KeyCertSign CrlSign	serverAuth clientAuth	none	present CA: True PathLength: 0
6	sg_unipass_root_ca_2016	CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE	CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE	`1`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True
7	sg_unipass_server_authentication_2016_ca	CN=SG UniPass Server Authentication 2016 CA,O=GROUPE SOCIETE GENERALE	CN=SG UniPass Root CA 2016,O=GROUPE SOCIETE GENERALE	`7`	4096-bit RSA	sha256WithRSA	CA	KeyCertSign CrlSign	none	none	present CA: True PathLength: 0

🔧 Remediation actions (3)

Priority	Category	Alias	Serial	Issue	Action	Command
P1 CRITICAL	EXPIRY	ibmwebspheremqeqmjokerprd	`badfd44469f869025be0f9bfc603b556`	❌ Error: Certificate 1 Alias ibmwebspheremqeqmjokerprd Serial badfd44469f869025be0f9bfc603b556 expired 1214 days, 18 hours, 14 minutes ago.	Renew the certificate immediately.	`runmqakm -certreq -create -db "/home/joker/Tools/certificate/kdb/EQMJOKERPRD.kdb" -stashed -label "ibmwebspheremqeqmjokerprd_new" -dn "cn=eqmjokerprd.pbgate.net,o=Credit Agricole SA,st=Île-de-France,c=FR" -size 4096 -sig_alg SHA256WithRSA -file "/home/joker/Tools/certificate/kdb/EQMJOKERPRD_eqmjokerprd.pbgate.net.csr"`
P1 CRITICAL	EXPIRY	ibmwebspheremqeqmjokerprd_2023_1	`f78f768b06d832faa95c1d80d9d6f980`	❌ Error: Certificate 2 Alias ibmwebspheremqeqmjokerprd_2023_1 Serial f78f768b06d832faa95c1d80d9d6f980 expired 845 days, 18 hours, 14 minutes ago.	Renew the certificate immediately.	`runmqakm -certreq -create -db "/home/joker/Tools/certificate/kdb/EQMJOKERPRD.kdb" -stashed -label "ibmwebspheremqeqmjokerprd_2023_1_new" -dn "cn=eqmjokerprd.pbgate.net,o=Credit Agricole SA,st=Île-de-France,c=FR" -size 4096 -sig_alg SHA256WithRSA -file "/home/joker/Tools/certificate/kdb/EQMJOKERPRD_eqmjokerprd.pbgate.net.csr"`
P2 WARNING	ALGORITHM	sectigo_1	`1`	SHA1withRSA — deprecated, will be disabled	Plan migration to SHA256withRSA at next renewal.	`runmqakm -cert -delete -db "/home/joker/Tools/certificate/kdb/EQMJOKERPRD.kdb" -stashed -label "sectigo_1" runmqakm -cert -add -db "/home/joker/Tools/certificate/kdb/EQMJOKERPRD.kdb" -stashed -label "sectigo_1" -file "" -format ascii -trust enable`

🔗 Chaining alias (6 chain(s))

Certificate	Chain
ibmwebspheremqeqmjokerprd	sectigo_3 ----> sectigo_2 ----> sectigo_1
sectigo_1	(root)
sectigo_2	sectigo_1
sectigo_3	sectigo_2 ----> sectigo_1
sg_unipass_root_ca_2016	(root)
sg_unipass_server_authentication_2016_ca	sg_unipass_root_ca_2016

📝 Chaining serial (6 chain(s))

Serial	Chain
1 (sectigo_1)	(root)
1 (sg_unipass_root_ca_2016)	(root)
137d539caa7c31a9a433701968847a8d	3972443af922b751d7d36c10dd313595 ----> 1 (sectigo_1)
3972443af922b751d7d36c10dd313595	1 (sectigo_1)
7 (sg_unipass_server_authentication_2016_ca)	1 (sg_unipass_root_ca_2016)
badfd44469f869025be0f9bfc603b556	137d539caa7c31a9a433701968847a8d ----> 3972443af922b751d7d36c10dd313595 ----> 1 (sectigo_1)

⚠️ Warnings (1)

⚠️ Warning: Certificate 3 Alias: sectigo_1 Detail: uses the SHA1withRSA signature algorithm, which is considered a security risk and will be disabled in a future update.

❌ Errors (2)

❌ Error: Certificate 1 Alias ibmwebspheremqeqmjokerprd Serial badfd44469f869025be0f9bfc603b556 expired 1214 days, 18 hours, 14 minutes ago.
❌ Error: Certificate 2 Alias ibmwebspheremqeqmjokerprd_2023_1 Serial f78f768b06d832faa95c1d80d9d6f980 expired 845 days, 18 hours, 14 minutes ago.