my.tikktalk.com

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 6d:7a:6c:64:25:68:8f:2d:39:dc:e4:37:b8:14:17:cc was issued on by StartCom Ltd..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=my.tikktalk.com,C=NO

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:7a:6c:64:25:68:8f:2d:39:dc:e4:37:b8:14:17:cc
Serial Number (int): 145521510191927874705344916716438951884
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 19:c0:0e:8d:68:f1:1f:3a:a3:bd:5d:f5:9c:22:03:2b:e7:e0:9e:4e
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): f2:53:69:9f:7d:4f:ed:df:e8:30:79:2f:19:0d:53:eb:17:4d:75:bc
Fingerprint (sha256): 5f:71:0f:a7:c7:75:67:82:97:cf:34:c8:b5:e9:f3:e2:27:c5:71:02:02:09:fe:77:d8:03:4c:3b:71:fd:91:ba

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate my.tikktalk.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.tikktalk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.tikktalk.com
my.skiwo.com
staging.my.tikktalk.com
staging.my.skiwo.com
dev.my.tikktalk.com
dev.my.skiwo.com
beta.tikktalk.com
beta.skiwo.com

Other certificates including the domain name tikktalk.com

(limited to 100 certificates)
www.tikktalk.com
ws.tikktalk.com
dev.my.tikktalk.com
links.crisp.tikktalk.com
www.tikktalk.com
dev.my.tikktalk.com
www.tikktalk.com
staging.my.tikktalk.com
dev.my.tikktalk.com
qa.core.tikktalk.com
staging.www.tikktalk.com
live.my.tikktalk.com
qa.push.tikktalk.com
dev.my.tikktalk.com
qa.desktop.tikktalk.com
rc.push.tikktalk.com
tikktalk.com
support.tikktalk.com
staging.www.tikktalk.com
tikktalk.com
staging.www.tikktalk.com
tikktalk.com
qa.core.tikktalk.com
rc.core.tikktalk.com
staging.my.skiwo.com
secure0045.hubspot.com
qa.push.tikktalk.com
staging.my.tikktalk.com
dev.ws.skiwo.com
push.tikktalk.com
links.crisp.tikktalk.com
staging.my.skiwo.com
qa.push.tikktalk.com
staging.www.tikktalk.com
core.tikktalk.com
staging.www.tikktalk.com
staging.my.tikktalk.com
staging.ws.tikktalk.com
staging.www.tikktalk.com
secure0045.hubspot.com
staging.my.tikktalk.com
staging.my.tikktalk.com
support.tikktalk.com
ws.tikktalk.com
live.my.tikktalk.com
support.tikktalk.com
staging.www.tikktalk.com
tikktalk.com
staging.www.skiwo.com
push.tikktalk.com
secure0045.hubspot.com
www.tikktalk.com
push.tikktalk.com
core.tikktalk.com
www.tikktalk.com
rc.my.tikktalk.com
dev.ws.skiwo.com
nb.support.tikktalk.com
strings.my.tikktalk.com
dev.my.tikktalk.com
tikktalk.com
video.tikktalk.com
rc.push.tikktalk.com
www.tikktalk.com
secure0045.hubspot.com
skiwo.com
secure0045.hubspot.com
live.my.tikktalk.com
rc.push.tikktalk.com
core.tikktalk.com
skiwo.com
staging.www.tikktalk.com
support.tikktalk.com
staging.my.tikktalk.com
video.salita.no
secure0045.hubspot.com
my.tikktalk.com
tikktalk.com
skiwo.com
localdev.ws.tikktalk.com
tikktalk.com
staging.www.tikktalk.com
support.tikktalk.com
qa.desktop.tikktalk.com
qa.push.tikktalk.com
support.tikktalk.com
rc.push.tikktalk.com
support.tikktalk.com
live.my.tikktalk.com
my.tikktalk.com
staging.my.skiwo.com
live.my.tikktalk.com
staging.rtc.tikktalk.com
wrk-osl.videonor.net
staging.www.tikktalk.com
my.tikktalk.com
my.tikktalk.com
secure0045.hubspot.com
old.my.tikktalk.com
dev.my.tikktalk.com

Certificate

The complete raw certificate details for my.tikktalk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlKH/jmqVMujwPrFHbf
XjkqHB6q6Ej+EH+YXCnsvWPD4yhOgSKgLy6F0Bjf2ZqdHvC6pES+gdoPzEx4H8Gx
Ox7GelaMjwOJ9hFFNF5DumVURZgYTXW20tBrrHoMcM61W1wHKWBMdQmXBGq974Sl
uPepyry4ar8/zfm0tj1d5xgXf2oQWDWqbHHs5PSBgBx42i5FMbhUHePM4X1U+jNm
lhHQ0vet0MUcICXpy3s6JnfHhb1vD7qzaQuiDM7dF2Jge3Ur8AJcA/X9RJH5+Nxi
QgnXylOMN0ouiF9zTrSKZPSKhbG/aSNPr10BpeG99uJECmkieV6beEcADORIKo/r
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145521510191927874705344916716438951884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-12 15:21:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 15:21:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'my.tikktalk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22782705000325334082438335669067991144806640652536235745329448239748915253948475888459535685852013692019408503250511456099093012230955885059229900956438190800398012795980403900944824522728485024307065558476993956045471830175298875011465065626614397650501325094846939042308949199080648948723796670552942618886076023664079046660971474752303444202581421565188658633410741398661692929109241182008399602496391507971601528532627709910724161702970776549282394774306004474772676478901458552268295366325177276559628667825019103204911183262283549135649616739005655867706994478270180541052497580929740187445196635916132940770209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19c00e8d68f11f3aa3bd5df59c22032be7e09e4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tikktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.tikktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.my.tikktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.my.skiwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.tikktalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.skiwo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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