ssl.lumit.it

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 4e:99:56:36:fc:a2:de:bb:90:99:7d:bc:2b:9a:fc:b2 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.lumit.it,C=IT

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:99:56:36:fc:a2:de:bb:90:99:7d:bc:2b:9a:fc:b2
Serial Number (int): 104475953734313076810669169705129540786
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 33:b5:d9:46:cf:c2:35:91:fa:67:9a:15:0c:eb:2c:f4:2b:0c:ea:5a
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 98:e3:bf:3e:5c:78:bd:a6:ed:ef:3a:e7:aa:3a:e6:87:70:0b:d3:7e
Fingerprint (sha256): 5f:1b:e4:79:41:1f:d8:b9:a0:a7:d4:5d:71:8b:25:09:20:fe:59:50:e1:5c:a3:37:84:a2:16:61:f5:74:1e:71

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate ssl.lumit.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.lumit.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.lumit.it

Other certificates including the domain name lumit.it

(limited to 100 certificates)
careers.rsaweb.co.za
careers.rsaweb.co.za
servicedesk.quanta.com
ezglobe.support.virtuo.mc
careers.lewenet.com
events.claever.academy
*.lumit.it
careers.ukbts.co.uk
*.lumit.it
autodiscover.lumit.it
jobs.thepmocompany.com
careers.ukbts.co.uk
dax.lumit.it
events.nectere.co.uk
events.nectere.co.uk
jobs.42nerds.com
careers.geninvo.com
careers.danecca.com
jobs.bamero.de
help.qweb.si
careers.rsaweb.co.za
support.medixus.co
events.claever.academy
connectivity.profitroom.com
help.qweb.si
careers.rsaweb.co.za
www.charlasdam.com
careers.blueprintsecurity.nl
careers.ukbts.co.uk
ssl.lumit.it
careers.tecamb.it
careers.rsaweb.co.za
careers.ukbts.co.uk
careers.ukbts.co.uk
careers.tecamb.it
help.qweb.si
events.wearemhabitat.com
service.wineowners.com
jobs.spectrum-dm.de
ssl.lumit.it
careers.ukbts.co.uk
desk.10atm.com
jobs.silverside.com
careers.ukbts.co.uk
jobs.madas.gmbh
events.fortislaw.co.uk
jobs.aarini.eu
careers.rsaweb.co.za
help.qweb.si
jobs.liverestaurant.co.uk
wiki.lumit.it
careers.rsaweb.co.za
events.bitsnbites.net
careers.tecamb.it
careers.rsaweb.co.za
careers.onqor.co.uk
helpdesk.amlltd.co.uk
recruit.cs.zohohost.eu
development.grccontrol.com
careers.rsaweb.co.za
dax.lumit.it
careers.tecamb.it
jobs.pd-con.com
careers.rsaweb.co.za
events.claever.academy
support.tiger-optics.com
empleo.imf.com
events.claever.academy
recruitment.ncdigital.co.uk
careers.tecamb.it
job.aorai-conseils.com
help.qweb.si
ssl.lumit.it
ssl.lumit.it
support.ibuy2give.co.uk
careers.ukbts.co.uk
support.wazzupsoftware.com
events.claever.academy
carrieres.porsche-informatik.com
support.amplyfi.com
careers.rsaweb.co.za
help.qweb.si
careers.rsaweb.co.za
careers.rsaweb.co.za
ssl.lumit.it
support.hgem.com
servicedesk.lumit.it
support.slidestovideo.com
services.rightmarket.com
careers.tecamb.it
events.hardingsurveyors.co.uk
jobs.arcticcircledc.com
help.qweb.si
recruit.customia.com
contact.recbody.com
events.greymatterlearning.co.uk
wiki.lumit.it
events.nectere.co.uk
careers.tecamb.it
careers.ukbts.co.uk

Certificate

The complete raw certificate details for ssl.lumit.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA0A78MHaomQUXC9UO6U
005FpQolNsmx4INb8bx5Ud3Fi4fXfh8+HYnONxYxWXQ3yF1oFT2ALRRGfFO9sFvt
XkSk5hL7DaWC8bGqoxOBwwSPGLDxXA/Py+cVXqE9bEMKGZ4x3uAZFB2fkSFVRS6P
VXReLR7chWytpqntO2foK/PoJYpw66WSFnLSWabSsjP0LUoRhuX3H9CRquoPna5F
8M/hibqn03RI4KZieGLO7g5x5Xn6+zs4JeL+dcLqfcoPyvZgCgr5qSho2v8UpoSS
AEHworDT2xiQirNK3yeS8w/TWSmfO59F+QVtQxwNyrpQIEH4iLUPUrmMSVbFz7jC
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104475953734313076810669169705129540786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-27 10:35:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 10:35:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl.lumit.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24244166896468681610325388559189637130871115719132071838963561658325382376633969609246169373009732434398100025871648209438928854436127242706294476434036712190290580639465084767674039400624912980044442077446116920306633180123432206543655138157760990200242592560931854292739417320776860907777352763727405307595862986716689416854034153445895639159935100553298591922258180115143110864366229623665873832699952339415904344741187581399958368234259901188014239685015836404904932109411347318352909172516002103339031583068711595617194973183131414446647634114101561349808377935876126045778473685660991968348035679271331892347633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33b5d946cfc23591fa679a150ceb2cf42b0cea5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.lumit.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							01e300770041b2dc2e89e63ce4af1ba7bb29bf68c6dee6f9f1cc047e30dffae3b3ba2592630000015a7f4908df0000040300483046022100901fe778ddb3fa3726326fd92bb637e2c38e0042573adb4fe88a157882e03bc602210089a8b5367d5745f3f962791b3ec541f87b82ac49cf8eb436303bdbeb6b8e8bf3007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015a7f490cb9000004030048304602210089d0568050891cbc5e3159e3434c4e3495cbc31a37577bf2f8a9ef5824dba8f0022100e7c8b3cc3e0b9ea1ea4ede1c96631e648d132019e856cf698e654737e79737a5007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a7f490c070000040300473045022100eb03ecf74d9e94ce289df3128a5dc94d1f5217c22428152545aa758351672ac102207b0110f3669dbd74bdaf3f6e09a420771035fc8dc753ed4f2a4f23f1e20abbc500770034bb6ad6c3df9c03eea8a499ff7891486c9d5e5cac92d01f7bfd1bce19db48ef0000015a7f4905ae0000040300483046022100e3b3a5c54060163e522ce52127b551c8be306d3fbe27b7f245ecddf2044071ac022100b5531018db907cce30bbfbc0c75e3076255dd7a05d2e8a2b2ccae98c6c3b4722
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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