faq.marktompkins.me

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 51:1a:3e:9f:eb:1c:a8:9e:51:89:c4:75:1c:77:39:28 was issued on by StartCom Ltd..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=faq.marktompkins.me

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 51:1a:3e:9f:eb:1c:a8:9e:51:89:c4:75:1c:77:39:28
Serial Number (int): 107803737556336980904141556600205162792
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: da:bb:ef:94:a0:56:20:14:cb:d7:fb:44:46:28:fe:64:a4:42:aa:13
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): f8:e9:42:0a:2f:eb:67:98:e5:d3:4b:f3:8f:b0:ca:42:b6:1f:39:ba
Fingerprint (sha256): 62:67:d6:c6:5e:d3:89:ef:9b:a6:d7:cf:b2:14:37:06:4b:1d:a9:e1:bc:31:99:8c:7e:65:8b:9f:86:c9:d0:8c

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate faq.marktompkins.me

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faq.marktompkins.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

faq.marktompkins.me
git.marktompkins.me
nzb.marktompkins.me
pxe.marktompkins.me

Other certificates including the domain name marktompkins.me

(limited to 100 certificates)
oa.marktompkins.me
www.marktompkins.me
www.marktompkins.me
oa.marktompkins.me
*.marktompkins.me
git.marktompkins.me
*.marktompkins.me
marktompkins.me
blog.marktompkins.me
marktompkins.me
handwerker.mobiliar.ch
zeus.marktompkins.me
faq.marktompkins.me
marktompkins.me
marktompkins.me
marktompkins.me
zeus.marktompkins.me
tymodenengelsman.com
oa.marktompkins.me
nuc2.marktompkins.me
blog.marktompkins.me
marktompkins.me
git.marktompkins.me
cacitrak.com
nzb.marktompkins.me
faq.marktompkins.me
www.marktompkins.me
marktompkins.me
zeus.marktompkins.me
marktompkins.me
marktompkins.me
melonseed.media
syno.marktompkins.me
marktompkins.me
marktompkins.me
sni.cloudflaressl.com
*.marktompkins.me
pxe.marktompkins.me
faq.marktompkins.me
www.marktompkins.me
*.marktompkins.me
git.marktompkins.me
faq.marktompkins.me
www.marktompkins.me
turn.marktompkins.me
oa.marktompkins.me
git.marktompkins.me
www.marktompkins.me
*.marktompkins.me
digital.stratton-press.linkmalloc.com
faq.marktompkins.me
marktompkins.me
oa.marktompkins.me
marktompkins.me
marktompkins.me
git.marktompkins.me
marktompkins.me
www.marktompkins.me
plex.marktompkins.me
git.marktompkins.me
git.marktompkins.me
ui.skydropx.com
*.marktompkins.me
git.marktompkins.me
faq.marktompkins.me
marktompkins.me
faq.marktompkins.me
pkgs.marktompkins.me
demo.messehero.de
faq.marktompkins.me
www.marktompkins.me
faq.marktompkins.me
www.marktompkins.me
www.marktompkins.me
marktompkins.me
oa.marktompkins.me
marktompkins.me
marktompkins.me
faq.marktompkins.me
faq.marktompkins.me
nzb.marktompkins.me
*.marktompkins.me
git.marktompkins.me
*.marktompkins.me
git.marktompkins.me
*.marktompkins.me
www.bookfy.app
oa.marktompkins.me
plexpy.marktompkins.me
oa.marktompkins.me
dsm.marktompkins.me
marktompkins.me
marktompkins.me
git.marktompkins.me
www.marktompkins.me
marktompkins.me
www.marktompkins.me
sni.cloudflaressl.com
marktompkins.me
www.marktompkins.me

Certificate

The complete raw certificate details for faq.marktompkins.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107803737556336980904141556600205162792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-21 16:23:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 16:23:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'faq.marktompkins.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882220564818864632655649266905779634101413640829802430346269255450309131174878050767942052346715510876605498476722296835350474815130913792139931775617621840985051031805735482835750468038871593318465209209742775355124911145880754356777796998786420953761610069091536568790410570829154616800537818140478344571656373934004380733501047447643680239579959489667021983297274582082571401827426927623149174036938610016249023019842095750374033000181278812808680342456759359915968576342183541558427417470135922372149149161792734109524277094472427861179502992182345749711861486545748633018891888340773897977822209103212367378823315321653463621700371678554717557642991865005038476245018031907296731884667233158969835978068787446898560759091538113029531024776072096251629484197132307991577058695471027152917488526891498587495247233250550804753698936037041901231838189874695708911924110932751043755106326816577956122175985949526037346124975693598440403083786909006573665543101024654630486231988522470620137331635330150744382202969014855647160701256197325513662264927689951510548259974494513700610274398417355052360913939128130940767849598607020165081900964093380855766545389855218381045106168398108570470407091171112819397445076148803099856815350601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dabbef94a0562014cbd7fb444628fe64a442aa13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.marktompkins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.marktompkins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzb.marktompkins.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxe.marktompkins.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015439ba81a60000040300463044022060e3751958ab8744e0f5ab578f255fcb2ceac5550cf832652965aa3dba58f88802206d70c2ab2a2ad9268e3685e3b148301102f09692137b16d8d4b7efded126ecc6007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015439ba8519000004030047304502202014634fe451148c3f95f11153bc6e9568799dc4382d9d938fa142104da6f54b0221008701961ce816aff0445a2a71be233e9b0e8fe0f9e2703bfeaac216e331fb7dc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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