www.hungry.cat

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 1f:ff:9e:6d:97:46:27:3b:63:6d:12:5c:a3:d1:20:7b was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hungry.cat

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:ff:9e:6d:97:46:27:3b:63:6d:12:5c:a3:d1:20:7b
Serial Number (int): 42533316871662910682244341250644844667
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ef:b1:d5:62:10:b4:f3:09:3e:18:4f:e8:6d:1d:80:38:03:20:54:ea
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 99:2c:c4:6a:68:d7:f5:fc:a0:68:df:b5:4a:53:1b:7c:8b:40:6c:7e
Fingerprint (sha256): 5b:5e:dd:80:fb:de:9b:8c:ef:a4:85:e5:96:8e:8d:d0:58:93:c8:db:8e:6f:14:fe:88:a6:70:8d:19:a8:57:9a

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate www.hungry.cat

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hungry.cat

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hungry.cat
hungry.cat

Other certificates including the domain name hungry.cat

(limited to 100 certificates)
www.hungry.cat
www.hungry.cat
home.hungry.cat
home.hungry.cat
ed.hungry.cat
ww2.hungry.cat
home.hungry.cat
hungry.cat
www.img.xos8g1nqif47mdl.pcriot.com
img.hungry.cat
img.hungry.cat
ww2.hungry.cat
ww2.hungry.cat
hungry.cat
ww2.hungry.cat
ww2.hungry.cat
ed.hungry.cat
ww2.hungry.cat
www.hungry.cat
ww2.hungry.cat
home.hungry.cat
emp.hungry.cat
ww2.hungry.cat
emp.hungry.cat
ww2.hungry.cat
ww2.hungry.cat
www.hungry.cat
home.hungry.cat
ww2.hungry.cat
ed.hungry.cat
hungry.cat
www.hungry.cat
home.hungry.cat
home.hungry.cat
emp.hungry.cat
emp.hungry.cat
www.hungry.cat
emp.hungry.cat
hungry.cat
img.hungry.cat
img.hungry.cat
www.hungry.cat
home.hungry.cat
www.hungry.cat
ww2.hungry.cat
emp.hungry.cat
img.hungry.cat
emp.hungry.cat
ed.hungry.cat
www.hungry.cat
ed.hungry.cat
img.hungry.cat
home.hungry.cat
www.hungry.cat
ww2.hungry.cat
hungry.cat
emp.hungry.cat
emp.hungry.cat
img.hungry.cat
ww2.hungry.cat
hungry.cat
emp.hungry.cat
home.hungry.cat
ww2.hungry.cat
img.hungry.cat
ww2.hungry.cat
www.hungry.cat
ed.hungry.cat
www.hungry.cat
ed.hungry.cat
ww2.hungry.cat
emp.hungry.cat
ww2.hungry.cat
ed.hungry.cat
emp.hungry.cat
img.hungry.cat
emp.hungry.cat
emp.hungry.cat
img.hungry.cat
hungry.cat
www.hungry.cat
emp.hungry.cat
ed.hungry.cat
ww2.hungry.cat
home.hungry.cat

Certificate

The complete raw certificate details for www.hungry.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42533316871662910682244341250644844667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-22 19:16:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 19:16:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.hungry.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834277949595053975290973129429763348727133480259433241352828810325229596556359065092558204561838794229970217150944889472684225283507758763588877437635464308483022398416437462229872877043666359096110456986817468870139359187445888965290613232563047824100350642366182596772869303801265207932531179923776697511266439150332132190134547982773800324265824648717693667404643137099435876605099510947511980476466119013729520992807032117702091775573359022087307911141706608238188110446256443078404986200739964314911588658498429153801566551355567662999801356111420206309259897386121027202879174641004160551716326507952345301665037593883369964458823491741493219896373556619200837160421011188980908837290701914133848763270586348454263782758707117508247153347036442184187091287795145727987377884545419306827347744082992852888027446949127583999747076194316786755865184325472929459889585846373021092044803799158573927321067740779249138464184907847795619134117697745460453620552011613529095908151689293971476972673735857443443711796594648934264632597740336825966331729252950194357435695963757230306112323263564937225536910172320412963201384343667230607482846027787298686979703602053508703184794389696901601766866418277674331940551912229020136630634429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efb1d56210b4f3093e184fe86d1d8038032054ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungry.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungry.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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