vpn.scjtqs.com

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 6f:fd:58:ba:5c:c6:24:f0:87:a4:9d:ae:48:00:cd:56 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.scjtqs.com,C=CN

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:fd:58:ba:5c:c6:24:f0:87:a4:9d:ae:48:00:cd:56
Serial Number (int): 148859758254530484940538413379649326422
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 01:dd:fc:6c:1c:c3:33:e1:2d:2a:91:70:b2:06:e6:2c:c4:ea:1c:30
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): d1:d9:a3:fb:18:ac:17:2f:f4:8b:a4:2f:28:82:2d:c9:c0:e0:8f:58
Fingerprint (sha256): 05:e3:73:7a:22:35:1e:27:67:1a:18:1b:68:d3:e6:62:b0:12:44:97:90:ec:b0:59:55:e6:fc:58:c9:83:6a:76

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate vpn.scjtqs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.scjtqs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.scjtqs.com

Other certificates including the domain name scjtqs.com

(limited to 100 certificates)
gitlab.scjtqs.com
jose.scjtqs.com
gitlab.scjtqs.com
cloud.scjtqs.com
gitlab.scjtqs.com
file.scjtqs.com
vpn.scjtqs.com
jose.scjtqs.com
cdn.scjtqs.com
*.scjtqs.com
*.scjtqs.com
*.scjtqs.com
fwq.scjtqs.com
*.scjtqs.com
*.scjtqs.com
*.scjtqs.com
scholar.scjtqs.com
cloud.scjtqs.com
*.scjtqs.com
*.scjtqs.com
fwq.scjtqs.com
gitlab.scjtqs.com
mail.scjtqs.com
cdn.scjtqs.com
*.scjtqs.com
mail.scjtqs.com
*.scjtqs.com
test.scjtqs.com
*.scjtqs.com
fwq.scjtqs.com
*.scjtqs.com
mail.scjtqs.com
www.scjtqs.cn
jose.scjtqs.com
*.scjtqs.com
gen8.scjtqs.com
*.scjtqs.com
imap.scjtqs.com
wx.scjtqs.com
jose.scjtqs.cn
mail.scjtqs.com
fwq.scjtqs.com
jose.scjtqs.com
fwq.scjtqs.com
*.scjtqs.com
wx.scjtqs.com
cloud.scjtqs.com
q77.scjtqs.com
www.scjtqs.com
scjtqs-server.scjtqs.com
jose.scjtqs.com
cloud.scjtqs.com
mail.scjtqs.com
cloud.scjtqs.com
mail.scjtqs.com
*.scjtqs.com
mail.scjtqs.com
cdn.scjtqs.com
389029211.scjtqs.com
*.scjtqs.com
fwq.scjtqs.com
www.scjtqs.com
pop3.scjtqs.com
qiniu.scjtqs.com
*.scjtqs.com
google.scjtqs.com
jose.scjtqs.com
wx.scjtqs.com
gen8.scjtqs.com
wx.scjtqs.com
mail.scjtqs.com
gitlab.scjtqs.com
*.scjtqs.com
*.scjtqs.com
scjtqs-server.scjtqs.com
jose.scjtqs.cn
cloud.scjtqs.com
389029211.scjtqs.com
freemail.scjtqs.com
www.scjtqs.cn
*.scjtqs.com
fwq.scjtqs.com
*.scjtqs.com
mail.scjtqs.com
*.scjtqs.com
*.scjtqs.com
ubuntu.scjtqs.com
chem.scjtqs.com
mail.scjtqs.com
asus6.scjtqs.com
www.scjtqs.com
wx.scjtqs.com
*.scjtqs.com
jose.scjtqs.com
shop.scjtqs.com
mail.scjtqs.com
fwq.scjtqs.com
cdn.scjtqs.com
mail.scjtqs.com
jose.scjtqs.com

Certificate

The complete raw certificate details for vpn.scjtqs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAliBcnF5HjCsPTmnQ9Z9s
pqoQvQRtQFobCRv2P6o1MbRFEyKfVLWo5zGgLUNT3lNpr8syxbYkz0b3JR9j41DF
mee22hKYIBxtbmYUgYPHbpB0c4eFHPJQeachR+jN5B+YU+smERg3vXPITTe4OcR/
jUIsZ7qfnWFmjOF3NsEy3y50mDIbKwYnAsKK+wCkuwgPzjOOaZ89kUnv0wnuw5PO
RJv9RAhH1rOczJ65Y1beWw7uavmlWnRcz2U2V4OF+lsYBixs5gkfBuDIrwIrVSc1
pU2qW9TRaqkKq3zvOSdBS8sUXakHpGFNcGfh+pN5BihXIDpR7sW9TadoBY+Hcecz
e7iUeABBjc65BQKkeOwme/c6ly1Qia6/h7CP+dghS0a2CkZo6U8YGT/NFBsPqtUA
1OeRekb7YRAnaduAdNvIg97/Ptbfc9dUEV03RZ3585wDCt5/RZs0xEwRD33XRLUg
u9ad1Ow0QjvNXjogJocfA6yIXTLobd2blarvmv5qTi5clrqvgChaMkDDG5mJf+4G
8M6ABuAFFX+YmHjcm74kXi0xmWIGmFbQXDnD2TeXm5672gYO/Fd8hXOnGf9hMV4l
XUwmP8+SwgPY0/0cC+H1/PYK7vFC3wsLE7yVCl9wvGirv6ccTOG+5hc1kvQ/1JaS
UwG53ULuVKAhG8ZiP5r0RIUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148859758254530484940538413379649326422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 05:17:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 05:17:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.scjtqs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 612462330774331315697798641560811222709709112243527973999250815645297022877502168432918796525730864071729492724144651746611257638011409098018350949712586001746133311724732464802696317954377503346204829361983478060531554429362779664756289966107610276679978957649054248188163539114828586702538340928115879629589011854771220933139498353755523318043483672513310661347797310117917410215446902308695558411881714485621399022446516823037049942104142225437929533920717847552730622116614906009590567639994683617837175765360272155452313984012471592542345692779197128444294800487705452694540292175146964740928684642815466012099434100128637661076514662204491117600891915143390552217054120367537201923626689168715561867967811751442986017741468127501913584763222722420705340066043463922918914475142886178655593298908935189943815935983247371056315745489610256988244415292350582928893137391665700892562871185174272104524550337038043657213738605612420747133680305590988746336507469575807934493166765427313065976503801879636512343362068434942180670316662368726870259924956708960506516302156855933982341809100443957754357207764469323564468707663663272808678534444099496749571280649684615737274962641490818501168865307414145280343674528245856535974265989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01ddfc6c1cc333e12d2a9170b206e62cc4ea1c30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.scjtqs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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