repository.tigase.org

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 56:6e:3b:3b:2b:61:92:c9:84:c0:73:90:c1:56:b4:24 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=repository.tigase.org

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 56:6e:3b:3b:2b:61:92:c9:84:c0:73:90:c1:56:b4:24
Serial Number (int): 114885961641995614308704980130267051044
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:e7:6b:9f:b6:b2:ab:5e:a9:1c:84:e8:d2:d6:a0:61:ce:e5:dd:4a
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): a4:89:25:6d:0e:2e:b2:2a:c8:14:49:5d:f5:bb:80:0f:b4:66:49:37
Fingerprint (sha256): 31:13:b0:09:19:d6:ac:98:58:94:c3:cd:84:b5:07:33:6b:00:eb:34:b6:3b:a3:f3:29:32:a9:05:87:5f:9d:78

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate repository.tigase.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for repository.tigase.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

repository.tigase.org

Other certificates including the domain name tigase.org

(limited to 100 certificates)
tigase.net
mail.tigase.org
projects.tigase.org
repository.tigase.org
tigase.net
www.tigase.net
tigase.net
mail.tigase.org
mail.tigase.org
docs.tigase.net
projects.tigase.org
mail.tigase.org
www.tigase.org
repository.tigase.org
repository.tigase.org
www.tigase.net
www.tigase.net
tigase.net
projects.tigase.org
projects.tigase.org
tigase.org
projects.tigase.org
docs.tigase.net
www.tigase.net
projects.tigase.org
projects.tigase.org
tigase.org
repository.tigase.org
repository.tigase.org
repository.tigase.org
repository.tigase.org
build.tigase.net
www.tigase.net
repository.tigase.org
tigase.org
svn.tigase.org
projects.tigase.org
tigase.org
tigase.net
maven-repo.tigase.org
repository.tigase.org
tigase.org
repository.tigase.org
projects.tigase.org
www.tigase.org
tigase.net
mail.tigase.org
tigase.org
projects.tigase.org
tigase.org
projects.tigase.org
docs.tigase.net
projects-test.tigase.org
tigase.net
repository.tigase.org
tigase.org
www.tigase.net
docs.tigase.net
repository.tigase.org

Certificate

The complete raw certificate details for repository.tigase.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114885961641995614308704980130267051044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 06:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 06:24:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'repository.tigase.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786131488691605747842103612540730830109201031270602188200686214988355002766257360374876799856819877373967621981398041304054796122038009743415935698623150740634435822479962002570747577056537984930487203720505849147607488276992766590389325924765121045838823306793960280386519274697748471618443362257967946543329067875378790400342195586535476916215511848491135438637651928865647337407849223839379174311489916503622782188055218340565882040434703792651031638798380359885509703996604632378691052960356509247047291036739646568990458143547012628787476383393022273673416095246787826029925216195648752396394744288319110490252750353933789222553488457880028344846356445057547069584303214192198166922918898809472678875382178574610809380679945297592948729226082122332798427676109622305674793542486402794208143143431914879565827200129949260338029316707686090734105292991719671753867403891669697664712308188749937994621584468399497182768181668652417528589464793819108060252363307526062623861697000624863956740543424896046053474837773129586874122638700025067117473164908774256313677285040232502782585196529775839582082437751168907822368227841466574131593611860960808927780949232719790096020489248939873389325236876302046556947906630499159445763916807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ee76b9fb6b2ab5ea91c84e8d2d6a061cee5dd4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repository.tigase.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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