office-nc439.gitlab.stackspin.net

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 7b:45:c8:8a:c6:ff:f3:5d:08:a3:64:d4:21:08:57:9d was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=office-nc439.gitlab.stackspin.net

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:45:c8:8a:c6:ff:f3:5d:08:a3:64:d4:21:08:57:9d
Serial Number (int): 163857379441778170055953292282110171037
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e2:bc:d0:cb:bf:e6:7e:51:1b:2c:a9:33:6b:fa:9b:a0:33:1f:c0:6e
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 2f:3e:85:2d:6f:79:0b:33:d8:6c:e9:21:9f:f8:5e:fe:2b:5b:7b:69
Fingerprint (sha256): 04:7f:3b:67:3d:94:e8:30:bc:5b:c9:f9:35:c0:c9:2d:a2:44:1d:c0:ba:e6:ff:10:50:23:14:33:9a:ed:6a:6b

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate office-nc439.gitlab.stackspin.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for office-nc439.gitlab.stackspin.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

office-nc439.gitlab.stackspin.net

Other certificates including the domain name stackspin.net

(limited to 100 certificates)
zulip.main.ci.stackspin.net
sso.renovate-nextcloudes-calendar-4-x.ci.stackspin.net
sso.renovate-velero-3-x.ci.stackspin.net
alertmanager.main.ci.stackspin.net
files-nc326.gitlab.stackspin.net
grafana.main.ci.stackspin.net
dashboard.renovate-kube-promheus-stack-43-x.ci.stackspin.net
sso.renovate-nextcloud-onlyoffice-0-x.ci.stackspin.net
dashboard.main.ci.stackspin.net
office.main.ci.stackspin.net
alertmanager.1496-make-it-easier-to-add-an-app.ci.stackspin.net
grafana.main.ci.stackspin.net
wekan.main.ci.stackspin.net
office-nc.gitlab.stackspin.net
sso.main.ci.stackspin.net
office.main.ci.stackspin.net
wekan.renovate-cypress-included-10-x.ci.stackspin.net
sso.1442-upgrade-zulip-to-5-6.ci.stackspin.net
prometheus.main.ci.stackspin.net
grafana.renovate-cypress-included-12-x.ci.stackspin.net
office-nc.gitlab.stackspin.net
dashboard.main.ci.stackspin.net
sso.main.ci.stackspin.net
files.main.ci.stackspin.net
www.main.ci.stackspin.net
dashboard.v2.ci.stackspin.net
dashboard.renovate-kratos-0-x.ci.stackspin.net
prometheus.1495-initial-support-for-2fa.ci.stackspin.net
office.renovate-cypress-included-10-x.ci.stackspin.net
zulip.main.ci.stackspin.net
prometheus.main.ci.stackspin.net
alertmanager.main.ci.stackspin.net
dashboard.main.ci.stackspin.net
www.renovate-mariadb-11-x.ci.stackspin.net
prometheus.1499-update-flux.ci.stackspin.net
files.main.ci.stackspin.net
alertmanager.renovate-alpine-helm-3-x.ci.stackspin.net
sso.main.ci.stackspin.net
grafana.main.ci.stackspin.net
office.main.ci.stackspin.net
files.main.ci.stackspin.net
office.main.ci.stackspin.net
files.renovate-mariadb-11-x.ci.stackspin.net
grafana.pre-release-v2.ci.stackspin.net
office.renovate-nextcloud-onlyoffice-0-x.ci.stackspin.net
zulip.main.ci.stackspin.net
alertmanager.main.ci.stackspin.net
grafana.main.ci.stackspin.net
www.main.ci.stackspin.net
www.main.ci.stackspin.net
dashboard.main.ci.stackspin.net
alertmanager.upgrade-test.ci.stackspin.net
files-nc291.gitlab.stackspin.net
files.renovate-nextcloud-onlyoffice-0-x.ci.stackspin.net
dashboard.main.ci.stackspin.net
wekan.main.ci.stackspin.net
files-nc.gitlab.stackspin.net
grafana.main.ci.stackspin.net
www.renovate-wordpress-0-x.ci.stackspin.net
sso.main.ci.stackspin.net
grafana.main.ci.stackspin.net
www.renovate-wordpress-0-x.ci.stackspin.net
dashboard.renovate-nextcloud-onlyoffice-0-x.ci.stackspin.net
office-nc439.gitlab.stackspin.net
alertmanager.main.ci.stackspin.net
zulip.main.ci.stackspin.net
sso.main.ci.stackspin.net
zulip.main.ci.stackspin.net
files.main.ci.stackspin.net
prometheus.main.ci.stackspin.net
files-nc.gitlab.stackspin.net
wekan.main.ci.stackspin.net
dashboard.1279-use-sso-for-nc-helm-test.ci.stackspin.net
sso.1464-pin-and-renov-nextcloud-apps.ci.stackspin.net
grafana.main.ci.stackspin.net
office-nc346.gitlab.stackspin.net
office.1279-use-sso-for-nc-helm-test.ci.stackspin.net
office-nc.gitlab.stackspin.net
files-nc392.gitlab.stackspin.net
files-nc296.gitlab.stackspin.net
dashboard.renovate-metallb-4-x.ci.stackspin.net
prometheus.renovate-kube-promheus-stack-43-x.ci.stackspin.net
sso.main.ci.stackspin.net
zulip.renovate-mariadb-11-x.ci.stackspin.net
prometheus.main.ci.stackspin.net
files-nc402.gitlab.stackspin.net
alertmanager.main.ci.stackspin.net
zulip.main.ci.stackspin.net
grafana.main.ci.stackspin.net
prometheus.main.ci.stackspin.net
files-nc.gitlab.stackspin.net
office.1452-replace-instad-backend-insta.ci.stackspin.net
office.main.ci.stackspin.net
dashboard.renovate-kube-promheus-stack-41-x.ci.stackspin.net
sso.main.ci.stackspin.net
files.main.ci.stackspin.net
files-nc462.gitlab.stackspin.net
sso.main.ci.stackspin.net
files.main.ci.stackspin.net
sso.1473-helm-chart-cis-tags-unstable.ci.stackspin.net

Certificate

The complete raw certificate details for office-nc439.gitlab.stackspin.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHqd1jC88yTGdHHPNfXE
k0gQGXwm5Of5chl5MQd3i2W/aqtIOl6OEbRIycWgKXELkqrCrrQU7N/Nxr9mE6iI
J9atDH44Ua5NZXEnE8UV6nbe1iwsEfnXLIPaC8M4olF796pNaWrJOrmztqpwjQrO
2uqa0SUePRWstFNBomvqUxu4VhvYikvN3o5hpbJoDnqexD+Qj2B8Pw+EYnB26ruy
Gp8JAxzhbdxXvfGEAykgq/2ryn86bjWPVqVXdTfbkaN2kDTgQRT1GMhWk/n6wJhp
K3CkX6iksHfNvoHeAl3G8m4Yn+mFmHZwC2PDd65s76hTyrsp1l52QXJfxUe14GmA
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163857379441778170055953292282110171037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-10 22:00:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 21:59:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'office-nc439.gitlab.stackspin.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21773452928280034986127815311142944773722975619233967694118771934503396885502764980401731996600273057117337024795721983769370818641554142587383849053957129363404970226469119468902473324589927501007511110259512325023477236236307723934529226495322082149339937960668775601857999043686340047865720335916469035550888271187956233436122781490694175753222969111328104784938224883026177311872963470702005222802434700661567993962559586052257351232695176721789280558171183882756288897621242662975492491445035693047120462271423837341465909874214903968998511376050996953368474935360068186261511870000660509900908350445083079311383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-nc439.gitlab.stackspin.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2bcd0cbbfe67e511b2ca9336bfa9ba0331fc06e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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