repository.tigase.org

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 56:6e:3b:3b:2b:61:92:c9:84:c0:73:90:c1:56:b4:24 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=repository.tigase.org

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 56:6e:3b:3b:2b:61:92:c9:84:c0:73:90:c1:56:b4:24
Serial Number (int): 114885961641995614308704980130267051044
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:e7:6b:9f:b6:b2:ab:5e:a9:1c:84:e8:d2:d6:a0:61:ce:e5:dd:4a
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): a9:0b:ce:1d:92:bc:ce:76:48:55:2e:09:23:69:c4:07:63:54:26:2d
Fingerprint (sha256): 73:e3:28:bf:ee:fd:40:51:a5:71:75:a1:02:3f:b7:88:7a:dc:3b:d9:b4:04:ff:af:16:c2:65:2f:bc:45:82:a3

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate repository.tigase.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for repository.tigase.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

repository.tigase.org

Other certificates including the domain name tigase.org

(limited to 100 certificates)
tigase.net
mail.tigase.org
projects.tigase.org
repository.tigase.org
tigase.net
www.tigase.net
tigase.net
mail.tigase.org
mail.tigase.org
docs.tigase.net
projects.tigase.org
mail.tigase.org
www.tigase.org
repository.tigase.org
repository.tigase.org
www.tigase.net
www.tigase.net
tigase.net
projects.tigase.org
projects.tigase.org
tigase.org
projects.tigase.org
docs.tigase.net
www.tigase.net
projects.tigase.org
projects.tigase.org
tigase.org
repository.tigase.org
repository.tigase.org
repository.tigase.org
repository.tigase.org
build.tigase.net
www.tigase.net
repository.tigase.org
tigase.org
svn.tigase.org
projects.tigase.org
tigase.org
tigase.net
maven-repo.tigase.org
repository.tigase.org
tigase.org
repository.tigase.org
projects.tigase.org
www.tigase.org
tigase.net
mail.tigase.org
tigase.org
projects.tigase.org
tigase.org
projects.tigase.org
docs.tigase.net
projects-test.tigase.org
tigase.net
repository.tigase.org
tigase.org
www.tigase.net
docs.tigase.net
repository.tigase.org

Certificate

The complete raw certificate details for repository.tigase.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLIzaDl/9VBR97EmFm/b
c9mz2cbLaaWX+WaeNaP9xhdBaa1pdLsy/sEcz2b4VM+KqJs14TRBOPl3t5vjkfR3
or5VbeN4Z94XOAEvDgesOUNtzd73SrzlVs6UrJR84D9sALXsOglTIX7nXsPS6qXh
I/Go1QttYUiPfJ4qUQncLQuHl1nxhwcgvOmzPGIrKNWi5C81kZf43d4cAxQkLPOM
fFIPii2U7adKSgA2DSGN62O3UNoxAgAbCq1REiNXMcBzj/+bifV652xyyxryjt/k
7sDvUee+vmbxXtpIVK0uMJSiJmuCcfBcex0iQhyBh3Jv+O8jmgIIkME7fw7gwRj4
O8ztROwkgHnk5Si+I1JpGUIRPqgO3yRilhY/4SjrG1Y3MGP/luko3hlW2toSCkTa
M7l8Yl9h95fm26H3Ep6VVOE6mO9/M8rTLIphFInSeBuMvRW77oLQhSgKtmDS9Uk1
PwIADSvInMYu5R0PCZHJaMCUOLaYEtwYzGcWWL+juSLSwClKJ3AhaLig5fJSKOiH
8cb+r4OTkb1Qn1EM3NxWYUoA3Jxz2LD/N2LKomcoxAAwagO8wh6zhICEfk82bL4/
JSgatbiGMSPwjW7jI+EEpq6Z1enfgytS7eFmdnk1HYjLGh3Pf+uumnquNoQzbf3K
Xa5Ak0q7RASQG69VONBiBAcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114885961641995614308704980130267051044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 06:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 06:24:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'repository.tigase.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786131488691605747842103612540730830109201031270602188200686214988355002766257360374876799856819877373967621981398041304054796122038009743415935698623150740634435822479962002570747577056537984930487203720505849147607488276992766590389325924765121045838823306793960280386519274697748471618443362257967946543329067875378790400342195586535476916215511848491135438637651928865647337407849223839379174311489916503622782188055218340565882040434703792651031638798380359885509703996604632378691052960356509247047291036739646568990458143547012628787476383393022273673416095246787826029925216195648752396394744288319110490252750353933789222553488457880028344846356445057547069584303214192198166922918898809472678875382178574610809380679945297592948729226082122332798427676109622305674793542486402794208143143431914879565827200129949260338029316707686090734105292991719671753867403891669697664712308188749937994621584468399497182768181668652417528589464793819108060252363307526062623861697000624863956740543424896046053474837773129586874122638700025067117473164908774256313677285040232502782585196529775839582082437751168907822368227841466574131593611860960808927780949232719790096020489248939873389325236876302046556947906630499159445763916807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ee76b9fb6b2ab5ea91c84e8d2d6a061cee5dd4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repository.tigase.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001547fc1bf630000040300483046022100ecde1846534299511b0408a8dab0514feea19cd0bf8ab584ba40dca55c1e345702210091a2eefc9527a2e78a891bb09b5bc55b7e4e60e756834cd48cf4107351906084007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001547fc1c14c000004030048304602210089fa6a2b9f5363575b6b2efa280e0a5a1615e7d349b18ef7c22a8e6bda059887022100b6f40cbbe6afcdca9ff59e33bf4108d5660a94e6a0e6168c64780f2bc06ccbbe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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