tigase.net

- Tigase, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:db:78:d1:19:13:d9:75:92:ff:38:0f:ec:be:84:b4 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tigase, Inc.

Organization: Tigase, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:db:78:d1:19:13:d9:75:92:ff:38:0f:ec:be:84:b4
Serial Number (int): 21077983404392390784397105820258436276
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bf:c0:06:c6:6a:06:b9:f7:54:1f:09:78:c3:94:c7:c5:7d:58:50:5f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e3:3e:d0:d9:47:98:b6:dc:a9:97:09:e6:c9:87:49:21:9b:ef:a8:66
Fingerprint (sha256): 0b:fc:38:fb:7c:ce:0d:7c:e0:70:53:5f:16:a7:f4:d2:d8:df:b9:04:ee:57:8e:0a:a0:b4:8f:88:e5:66:b7:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g1.crl

Check the revocation status for certificate tigase.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tigase.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tigase.net
tigase.tech
git.tigase.tech
projects.tigase.org
tigase.org
tigase.im
tigase.me
tigase.archi
tigase.chat
tigase.mobi
tigase.com
tigase.online
tigase.cloud
tigase.io

Other certificates including the domain name tigase.net

(limited to 100 certificates)
projects.sooite.it
projects.robertastylelee.co.uk
tigase.net
support.dailymenus.com
license.tigase.net
projects.innoneur.com
license.tigase.net
subscriptions.mitustudio.ca
projects.koodalingam.xyz
projects.lifemesh.ai
accounts.phil-taylor.com
tigase.net
mail.hyltondaniel.com
mail.etrackmedia.com
support.dailymenus.com
dev.tigase.net
projects.stratusclear.com
billing.steadyconnections.com
projects.moreresourceful.com
mail.whiteeagleinsurance.com
tc.tigase.net
www.tigase.net
hr.tubesock.net
projects.brookhouseps.com
projects.robertastylelee.co.uk
zohopeople.roundhill.com
people.kvg.com
subscriptions.ezarmskeeper.com
tigase.net
subscriptions.smarthomesentry.com
timesheet.remoteadmin.net
source.tigase.net
checkout.renttocredit.com
support.dailymenus.com
tareas.geneticaweb.es
mail.etrackmedia.com
mail.labspot.com
my.amigoz.pro
docs.tigase.net
accounts.phil-taylor.com
subscriptions.scyllatechnologies.com
license.tigase.net
subscriptions.scyllatechnologies.com
mail.bizdemo.net
project.flexitnet.co
license.tigase.net
build.tigase.net
stats.tigase.net
mail.aidjuris.com
*.tigase.net
facturation.simpi.fr
mail.sawtoothxr.dev
pay.lyfepix.com
subscriptions.scyllatechnologies.com
license.tigase.net
subscriptions.jollywagger.com
projects.robertastylelee.co.uk
subscriptions.smarthomeassurance.com
billing.rizereviews.com
www.tigase.net
projects.alltres.com
support.optimusinfo.com
www.tigase.net
tigase.net
member.nomadinternet.com
subscriptions.abovethebardigital.com
subscriptions.navixy.com
mail.tigase.net
subscription.cabmastersoftware.com
subscriptions.scyllatechnologies.com
assinatura.belezacerta.com
*.tigase.net
subscriptions.agri-companies.live
tigase.org
source.tigase.net
docs.tigase.net
mail.aidjuris.com
projects.sentrymarketing.com
billing.docnowmd.com
projects.tigase.net
accounts.phil-taylor.com
projets.yeddir.fr
cloud.tigase.net
projects.robertastylelee.co.uk
mail.amor-jordan.com
subscriptions.entice-design.com
docs.tigase.net
license.tigase.net
accounts.phil-taylor.com
people.jettbusiness.com
mail.gypsco.com.sa
cloud.tigase.net
subscriptions.artchiv.ist
www.tigase.net
tigase.net
stats.tigase.net
support.dailymenus.com
mail.sve.tiss.edu
support.iij-engineering.co.jp
license.tigase.net

Certificate

The complete raw certificate details for tigase.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21077983404392390784397105820258436276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tigase, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tigase.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 606644224463284879968208961640748841594843150480358573124242975110974498044626920634781081202592476895374519981171966228110570863663626267467422367189888824829023497784530784399433472155865689562834712576290032282525438605424792375515197040693973772362147810064518733002075103099128563020770502146337960571046955252244113307308694551111903510579906974990081068173098599196759154081510706175535035833624433959854231803140553746074365718888012876821825047422459082005938939354620466197994880638450121009746970452408902001819020417982156859141232841729230272760055868955212038973903712187480075428188567327111885355648803012777569797613071106146929199583276685619001200898036964301071849167728884082052334290535096874527717429418066316088456494934727143961218966192912153610697638566103335876117332188852589619096582680601221092768189045635853241139556552898729594346813400970621229134635724271890642898402820718818835629640025583674288473089033962317802184129393235201167714731543788456834901326705378665552277483106264636065733259008082304376913170160544209263910185077124036491254897380487014564124139909168684116943309617806664323460109868193490523522041176931323076159883219281070410155654345034399496894890929869570911071682766747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfc006c66a06b9f7541f0978c394c7c57d58505f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.tigase.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.tigase.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.archi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigase.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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