*.logi.one

Issued by StartCom Class 2 IV Server CA

About this certificate

This digital certificate with serial number 4e:e5:86:91:1b:b4:4b:1f:4e:e0:1b:2e:af:b0:4c:76 was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.logi.one,L=Apples,ST=Vaud,C=CH,2.5.4.42=#0c09417572c3a96c69656e,2.5.4.4=#0c075468c3a9766f7a

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:e5:86:91:1b:b4:4b:1f:4e:e0:1b:2e:af:b0:4c:76
Serial Number (int): 104871548991372424173321998589278309494
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fa:c9:9a:d3:7b:17:8e:e5:52:7f:6e:45:d0:26:83:1b:6d:aa:05:3e
AuthorityKeyId:

Fingerprint (sha1): 59:15:93:14:48:95:a2:0c:aa:30:4f:db:07:f3:d5:9c:e4:1a:e1:e1
Fingerprint (sha256): 21:be:e9:a4:71:ad:25:a7:01:8f:8c:ac:fe:d9:62:22:91:50:79:aa:83:a9:2c:b7:5b:d6:26:b2:91:a6:07:3f

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server2.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server2.crl

Check the revocation status for certificate *.logi.one

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.logi.one

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.logi.one
*.logione.ch

Other certificates including the domain name logi.one

(limited to 100 certificates)
me.tcmhack.in
togetherdog.dimigo.kr
logi.one
bukaloenis.com
www.logi.one
doc.logi.one
visahan.ml
dover.consulting
donate.helpforheroes.org.uk
volunteer.nirmaan.org
www.concentric.app
propecia.newstodayweb.online
www.ronandviv.com
logi.one
*.logi.one
app.sukii.at
vichy.vv.toysfilms-interactive.com
www.logi.one
doc.logi.one
invoicer.krustev.dev
www.logi.one
logi.one
www.ultimatesoundgroup.com
invenite.id
doc.logi.one
werkhuisgenk.be
www.logi.one
biz.nadiaapp.com
overlay.acadarena.com
admin1028.estore.business
doc.logi.one
logi.one
order.wokbar.paymytable.com
kenya.solomonschariot.com
logi.one
logi.one
renouf.dev
rpi.sonsofmedia.com
app.escrisp.com.br
smartbusinessct.com
dashboard.geomove.io
plants.trewhitt.se
www.reelheads.com
admin-sta.jointriage.net
www.logi.one
biyoloji.sinif360.com
www.nitra.ai
www.rethinker.com
inwoodsoftballleague.com
thong8.com
doc.logi.one
flyk.me
natewick.com
www.cairorose.co.uk
document.logi.one
doc.logi.one
bottega14.nempos.delivery
www.logi.one
dmvaljevo.rs
doc.logi.one
dover.consulting
prod1.office.owtoph.com
backoffice.optios.wtf
www.dlani.com.br
bottega14.nempos.delivery
www.ductaiphung.de
logi.one
logi.one
www.meetcoders.info
planetelevators.in
logi.one
logi.one
crossfitsolihull.com
doc.logi.one
doc.logi.one
www.albertsfinestfood.com
mifinejewelry.com
www.manoz.xyz
jennscheer.com
natewick.com
clearaccess.28east.co.za
rpi.sonsofmedia.com
www.musenine.com
agent.openhome.express
dev.wx2sistemas.com.br
www.punrelated.com
mifinejewelry.com
doc.logi.one
lemartva.dev
www.wherethewildbeersare.com
dev.wx2sistemas.com.br
doc.logi.one
doc.logi.one
logi.one
admin.experienciavirtualfime.com.mx
app.diastecnologia.com.br
app.hl.cafe
wopi.doc.logi.one
www.logi.one
integration.infusionsoft.app

Certificate

The complete raw certificate details for *.logi.one in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY4Qm6M02UEOy4Z/hj4A
CPyIovJvGqWjNsKBq8YnUcdpfueomK3koS8n5/a6L3N+A8BLurCMIhNvDP30TIQs
VYhm0ln5GfOjdrYuvniOH3D5Sq7TR+Ho6aSrS1a6tTsUQZJvxrm+6L4Rsr1FW0aL
RVXD7Ig+HKKJwd/r/XhdQLUyh24LLyR0nvRF94FOr1Mnspa/nyZ/tFTXprAZYlfK
HLesP+4mPuD0i4KNCME2iFfjR7goj3FB31myq2DoPuq2Yb+Wtaj/WAzuFl3xNoH5
l3B9JcSPolMklSNAvl/HWY85LCYchehU7ttKq0SQndhFuKuIKeFoIUXDZKT56NNi
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104871548991372424173321998589278309494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 2 IV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-20 11:29:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 11:29:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apples'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.4 (surname)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thévoz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.42 (givenName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Aurélien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.logi.one'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22919187999618477412775941746674404089887522548208731478018601491248997888137091013096388323910983321449069718310381388565636209197682164692563247175857364216516248546863233248308667318263138082668654889839516401398772579150640688814147165984207033425957555222826493894950302359594945241758654593708184184464232666564508100994814229970169601104820611338501798793506528210044672296319948205556537877320081518571179409737379668793977224209971302267641544061051773105694350545890846693511823062200053353198092808337587767625540946634413050464465948664593514771912160276922342776965446655205259112230521820722155914224173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac99ad37b178ee5527f6e45d026831b6daa053e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logione.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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