kinrossworld.kinross.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 0f:6a:c2:c4:f6:8b:23:44 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kinrossworld.kinross.com

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:6a:c2:c4:f6:8b:23:44
Serial Number (int): 1110914409305940804
Serial Number lenght: 60 bits, 8 octets

SubjectKeyId: 80:0c:87:23:3b:7d:0c:1f:73:2c:5c:bf:7d:d9:8c:c9:39:fc:ac:1e
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): ed:d3:aa:f4:61:46:c0:0f:54:5b:a9:27:72:06:83:2c:40:5b:50:a6
Fingerprint (sha256): 15:2a:f1:9c:92:91:48:da:84:6a:4f:d8:90:b7:05:a8:97:07:cd:fb:5c:75:91:c2:ca:f8:70:8b:6e:b6:a7:17

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-590.crl

Check the revocation status for certificate kinrossworld.kinross.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kinrossworld.kinross.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kinrossworld.kinross.com
www.kinrossworld.kinross.com

Other certificates including the domain name kinross.com

(limited to 100 certificates)
www.highq.com
suppliers.kinross.com
kinrossworld.kinross.com
businessservices.kinross.com
www.highq.com
kinrossworld.kinross.com
fb.kinross.com
gh-inx.kinross.com
www.highq.com
www.highq.com
*.kinross.com
www.highq.com
cwms.kinross.com
vpn4.kinross.com
webmail.kinross.com
www.highq.com
cwms.kinross.com
webmail.kinross.com
kinrossworld.kinross.com
www.highq.com
businessservices.kinross.com
www.highq.com
www.highq.com
www.highq.com
myinduction.kinross.com
sip.kinross.com
www.kinrossworld.kinross.com
www.highq.com
www.highq.com
guest.kinross.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
sip.kinross.com
workspace.kinross.com
tor-vpn.kinross.com
webmail.kinross.com
www.highq.com
us-vpn.kinross.com
www.highq.com
www.highq.com
university.kinross.com
www.highq.com
www.highq.com
webcontrol.kinross.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
aweis.kinross.com
www.highq.com
www.highq.com
www.kinrossworld.kinross.com
ca-vpn.kinross.com
www.highq.com
www.highq.com
vpn4.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
br-vpn.kinross.com
www.highq.com
autodiscover.kinross.com
www.highq.com
www.highq.com
access.cassels.com
www.highq.com
www.highq.com
www.highq.com
OCSwc.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
kr-webmail.kinross.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
kinrossworld.kinross.com
www.highq.com
www.highq.com
www.highq.com
vpn1.kinross.com
www.highq.com
cwms.kinross.com
www.highq.com
www.highq.com
myuniversity.kinross.com
www.highq.com
www.highq.com
www.highq.com
webcontrol.kinross.com
webmail.kinross.com
www.highq.com

Certificate

The complete raw certificate details for kinrossworld.kinross.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzFokUu0VPkWC3FachRH
cmJ8fudFKDqRWuCGgfxcInI+KP6ZsibbSN3qJvIXMAWli4b0bWf3SX4f38jvJD57
digEjJYMUYoQ/6waw9p7aq8TN9P+yn2YxY8HuFybpol0ZAGRI9X88xO/bJbF7MCo
5AsM4jSYqv6kV1eENtRGthRZAIwIfrewCl9phuiHLHnivaJ5xmOTytQkQobQ0rcJ
HGI/OWl1ohqVhLEnZJJuwp1riEUxc77XpjqcmZ8Ay1QCkfjQF/Qo0AbKmvNFFUs2
/pRHcvTYKxI+1Pra6ssfxmlxq5HtRVisu7xoSM/3zTcG79dqUx7LkANfhT8T1BNL
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1110914409305940804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 08:41:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 08:41:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kinrossworld.kinross.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26155693351136988726256254932960154819653129008943635662352150803755255999346603309708251510832408678088869632304596055965580616937305787904572768753386361275809342977520459630150552656437079187663556864239076678021076651767243146238127182114995631332576794557230131979454539058580156675260957396421108840005679210885463516026404087274600465409271654658666853757637097773734905242404313298137476539842189561465401397790071137692732553781048805996510856819616989816823250367118078185242547468083397583212443243076224867110936705414161957682184143312155787506604904502537142052264623327990437527389468516425469946711031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-590.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinrossworld.kinross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinrossworld.kinross.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							800c87233b7d0c1f732c5cbf7dd98cc939fcac1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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