cp.gigawebs.net

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 35:a3:38:3f:af:95:bf:ab:bd:3c:66:88:62:2a:3b:0f was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cp.gigawebs.net,C=NL

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 35:a3:38:3f:af:95:bf:ab:bd:3c:66:88:62:2a:3b:0f
Serial Number (int): 71296569025194672865434572524018613007
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 70:e4:16:94:d2:08:d0:8c:ad:4b:2b:2f:96:86:d5:57:d4:b3:57:c3
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 96:a6:6a:58:14:90:2e:ce:de:95:f6:fa:75:07:dc:06:c0:db:1a:78
Fingerprint (sha256): 0e:39:e4:78:6e:ee:90:b9:19:8a:59:3f:34:97:2a:34:69:9c:a8:03:a8:ea:1e:c2:97:5b:08:9a:7c:23:6d:aa

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate cp.gigawebs.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cp.gigawebs.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cp.gigawebs.net

Other certificates including the domain name gigawebs.net

(limited to 100 certificates)
mail.gigawebs.net
antongleuf.gigawebs.net
john.gigawebs.net
wiki.gigawebs.net
john.gigawebs.net
busfoto.gigawebs.net
video.gigawebs.net
webmail.gigawebs.net
ipplan.gigawebs.net
busfoto.gigawebs.net
mail.gigawebs.net
john.gigawebs.net
mail.gigawebs.net
video.gigawebs.net
sog.gigawebs.net
busfoto.gigawebs.net
cp.gigawebs.net
video.gigawebs.net
busfoto.gigawebs.net
*.gigawebs.net
gigawebs.net
webmail.gigawebs.net
*.gigawebs.net
busfoto.gigawebs.net
files.gigawebs.net
gigawebs.net
mail.gigawebs.net
busfoto.gigawebs.net
gigawebs.net
cloud.ftbonito.info
autodiscover.gigawebs.net
sog.gigawebs.net
files.gigawebs.net
video.gigawebs.net
webmail.gigawebs.net
webmail.gigawebs.net
files.gigawebs.net
files.gigawebs.net
files.gigawebs.net
video.gigawebs.net
muximux.gigawebs.net
webmail.gigawebs.net
dom.gigawebs.net
mail.gigawebs.net
wiki.gigawebs.net
antongleuf.gigawebs.net
gigawebs.net
webmail.gigawebs.net
webmail.gigawebs.net
autodiscover.gigawebs.net
files.gigawebs.net
dom.gigawebs.net
gigawebs.net
gigawebs.net
muximux.gigawebs.net
gigawebs.net
webmail.gigawebs.net
john.gigawebs.net
ipplan.gigawebs.net
gigawebs.net
antongleuf.gigawebs.net
sog.gigawebs.net
busfoto.gigawebs.net
gigawebs.net
sog.gigawebs.net
*.gigawebs.net
gigawebs.net
busfoto.gigawebs.net
antongleuf.gigawebs.net
gigawebs.net
files.gigawebs.net
antongleuf.gigawebs.net
files.gigawebs.net
mail.gigawebs.net
sog.gigawebs.net
files.gigawebs.net
john.gigawebs.net
remote.gigawebs.net
webmail.gigawebs.net
wiki.gigawebs.net
gigawebs.net
gigawebs.net
webmail.gigawebs.net
busfoto.gigawebs.net
busfoto.gigawebs.net
gigawebs.net
webmail.gigawebs.net
cloud.ftbonito.info
wiki.gigawebs.net
busfoto.gigawebs.net
files.gigawebs.net
busfoto.gigawebs.net
ipplan.gigawebs.net
webmail.gigawebs.net
video.gigawebs.net
muximux.gigawebs.net
busfoto.gigawebs.net
webmail.gigawebs.net
voip.gigawebs.net
*.gigawebs.net

Certificate

The complete raw certificate details for cp.gigawebs.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi2d03Zr3Kuv0NpLIpLA
3DQPL6oTT6zpRgPoF0L9W8HTPqc73zYFoCSkCiaJE/4PuuZD++JIzobqGp69sTYc
+qtMW5YJ0ejKX0O4/5mbGteUrHKAtatUCtK6E7dJrg+h2UJSlD4bL+6ICU1KQzl4
xWW+OLZDzSSQv1+Yf8bmBsmARYoJruLHivlrowI+IorW53NpGc7KG/7uc0afwqdJ
86mFpEGiyBg7Z2rXPEWrE3KOdZee6li6grnJZyaEIx3kOTxZUhjQUSRgjcj5qfVA
UKUuC45GmHsO6240smIPgrkq+TVoQoJoQWN0C2S7Rk0ICuW7Aan6K46f1NmlJvR+
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71296569025194672865434572524018613007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 08:39:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 08:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cp.gigawebs.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24007772281978490161747829092993310106894570899570141925721997155581850779963821818751542916401315512995318721156102696393178542541564444388547140746596424271170662953087734383680378152213972755107964240741973480496620597869009252776659975951170105220310710047560255678830230988805475065730302638395926077589814850516857532892419322467807598610261715795818448973078855404058876639160830119247883607094192466315932587722480950431411205759202258202846200280435912482164289978352332724951644040878609990973515406594155060604501088176553382561415994344257024195263214100896801840234810195498689222829433907752507419164221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70e41694d208d08cad4b2b2f9686d557d4b357c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.gigawebs.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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