ny1002.dnsnic.in

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 28:93:6c:33:3a:0c:7b:e9:91:b5:b4:c7:c8:4f:28:0c was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ny1002.dnsnic.in

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 28:93:6c:33:3a:0c:7b:e9:91:b5:b4:c7:c8:4f:28:0c
Serial Number (int): 53934582028439960024574917498746382348
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cd:cd:52:83:fe:7a:48:9a:a7:30:cb:5e:5a:c3:c8:1a:8e:45:e6:0a
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 60:d2:56:eb:60:54:9d:04:2a:a5:6a:56:77:33:c3:c6:4c:da:ae:5b
Fingerprint (sha256): 0a:63:d7:8e:94:ac:d5:6a:5b:25:d7:32:36:8a:78:c1:86:37:6e:4e:bb:83:ff:8f:b0:3c:4c:a7:df:c0:c7:78

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate ny1002.dnsnic.in

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ny1002.dnsnic.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ny1002.dnsnic.in

Other certificates including the domain name dnsnic.in

(limited to 100 certificates)
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix008.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ny1002.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
ny1001.dnsnic.in
sni157161.cloudflaressl.com
ix011.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
icd4.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ny1001.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix018.dnsnic.in
sni157161.cloudflaressl.com
ix006.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
results.unigoa.ac.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix003.dnsnic.in
tata-dr01.dnsnic.in
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
ix007.dnsnic.in
ix006.dnsnic.in
ix018.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix002.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
akash.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix011.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com

Certificate

The complete raw certificate details for ny1002.dnsnic.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqmP6frPuyrfZcnmS+Nm
zTyyM1/vtkk+zDHHZYtmdhrAPSiwmaPhwrgROkY/Pfqvw3G88/RLB32w3bZGZNSS
HnTjAA5D8nZurEDr9ZQEqTBtXvJcgHDnG7nqlSerBK8IYZLEIRwL5n4u29G9xVf5
bOQuq9wCtbKgI9vpbIKhzeM7jF+yfbWcziYKRhYGCBZRRcD5D7VE2lLpN59q/VnU
JI66nXqPnMNtNZziJzYKg1HFcJD+8xN4rhjLENLo+hbqR4QmLLtJnHOgkrOQIho/
LFucs2bXiOSXhHbaG6o8AYHPCNHagPPQVtkZsonlkIkmCCfv6keY0p+3lek5gJMZ
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53934582028439960024574917498746382348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-04 09:26:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-04 09:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ny1002.dnsnic.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23058985723234411310591898597337449106359257407316000426145228529140840799750827050955648570542101955523447459945779439369962518417341082167140117762961263227994775107016666041711372233397716965311006359741011664033062455151829435823950227138598069118609134246705374155045328023252291714130858333643003194782474914491426499850638354586722141592067903869621123619326636836153225460932092534805437062811071544893389165391592551670467743226680993270107574889409247088421255882292357147053900120934298306282990425217175554852894440035468429607283207289476219350867121210787437446275838122707654608150241683814450556246301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdcd5283fe7a489aa730cb5e5ac3c81a8e45e60a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ny1002.dnsnic.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001551acec5620000040300483046022100966570c5cccdd671d0c6569581aabd93c0786ceb5f0070920b132570d7b6c61802210095c32e8c53e98022df6803d5de309d47caa772a3b6d36040a640ace72fa5c3e700750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001551aced51c000004030046304402203aed1dff712d7223a404ed0ecf7e7aecba32c8df864c093f6d3aa5af367e267002204b617f3fd8cebb0d6ed3a195af6979dd3419973d56fc4d4ed8a8697ec2125ffd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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