electrc.ninja

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 5d:eb:f2:dc:63:d2:f0:28:26:a9:1a:37:9e:3b:c7:8d was issued on by StartCom Ltd..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=electrc.ninja,C=US

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:eb:f2:dc:63:d2:f0:28:26:a9:1a:37:9e:3b:c7:8d
Serial Number (int): 124843319173966722018199261322279634829
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:26:df:04:63:e7:49:ce:ad:ae:d7:51:e2:9d:93:18:d2:c6:91:07
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): a3:d3:50:61:d9:9a:4b:14:a6:37:e8:09:f5:ca:5b:1d:49:20:c3:c6
Fingerprint (sha256): 01:f1:2e:6c:f8:72:ea:ca:2e:ad:27:14:ae:5d:e3:80:d9:7e:82:08:7a:f0:59:aa:e5:19:13:6c:cd:1d:4f:a6

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate electrc.ninja

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for electrc.ninja

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

electrc.ninja
app.electrc.ninja
dev.electrc.ninja
dojo.electrc.ninja
www.electrc.ninja

Other certificates including the domain name electrc.ninja

(limited to 100 certificates)
electrc.ninja
electrc.ninja
electrc.ninja
www.hubatcolumbiareit.com
kasota.electrc.ninja
electrc.ninja
electrc.ninja
electrc.ninja
electrc.ninja
api.electrc.dev
bridge.easyvip.app
electrc.ninja
electrc.ninja
www.gispgestaosegura.com.br
sonata-api.electrc.ninja
sonata.electrc.ninja
sonata.electrc.ninja
electrc.ninja
electrc.ninja
wiki.electrc.ninja
ugurvurgun.com

Certificate

The complete raw certificate details for electrc.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl0OroNwm4DhlmYI7mc+B
MkxglwFzYzI+Zu9l1S1k6D5EDlckvFKzPj/+5d4fIX+dtHTiZzjqBBa2h4LcmbZt
ejKljfMKAxXh1mH7vCZKZxSj39nYclJxPSYH/8kxrCGlZ97pTC7Xgci5xVddlP+r
X2MGBrEDvQgYecvv3cTllyV0ihdq4YJRYhvhlXDuGHwx6/PwOPzA3pg2BSmEbAKA
H3PeOu1BF+DgU2dbfvn39agMmqk4/xNz8GJNpC9KLbbVrZTZpKS/hz4QffUGi1O+
/jLVqz2lkumgVPUpDsgRIxCPA0VHCZf4kVR3dwOblnPS640fkrs/OuR2AEceeu2k
9s8/ClNcRT06xQ8e92F6btXHqf25EnINV1olHMKW10AVLLm3ebAIpN1FNVvaP7TZ
UO7UiirMeijELOgXHarlcuHaM6gA3kaZtKiJeNTbKn/t2ArfHQVgrKfz9c3dOfjK
z3iP07aeKvotkix0ROUrr88rOyn04WJFMJbEIqEE/GdtbMxlTSBVpnaycj0VT+To
MeksM2sIR3a3vByVCufV/LxRzyo/qI9+a/unLj+xn2N4vVNrPOLWYo9PuJuVC+gF
Iw7xYd+SDotCHT16AxlLewDNZvjWvwr84o2AfVuqbzbdceeE5LSpJOBQshDR6bT8
Lx689zdxWYNKPHeR9DKZweMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124843319173966722018199261322279634829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-10 21:36:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-10 21:36:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'electrc.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617104657555835357217711983745523708152896583272042162796365336255425856957531493799487303473266555195076739554099567827481987449201780609014940484583965859122409004574013348479311071022262572096962337486821275075834820776726638644282413103479902210228478531387550286646003358793850582251207504605267457984488132247587911704066176920254035265178740495705704601964499325340315308526093492932147162193009913709825038656283605554106320769547095062176522701759083308552565316662480818125341054071518326569142009546028825340805860054161338572773072243167790030626057109370731054987085235630668794247165543206696422063592133416540917999745703524119080853964533725125857038794211850355538499906748253143919703496616052436411013724833160039718615953636970343947004674996665944353874967344660002193915721249895871350261594358046544522205324855944230852633488788304514537065813416504202089968052342102949253574322362032532518999242370864982633112337999119596893313022824129007637139181895614422608753226515179312100402883323120338867987397037016980721900057750830115877629570006533789700765751000824093980435248365435130321604200726633437104455746600702278353957794541804323653562341672752016198871581818656564307002436117341882441733148099043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec26df0463e749ceadaed751e29d9318d2c69107
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrc.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.electrc.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.electrc.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dojo.electrc.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electrc.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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