mail.kopimism.ro
Issued by StartCom BR SSL ICA
About this certificate
This digital certificate with serial number 7d:6f:70:55:5a:f6:11:4f was issued on by StartCom CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mail.kopimism.ro,C=RO
StartCom CA
Organization:
StartCom CA
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
ES
This certificate has expire since
Certificate Details
Serial Number (hex): 7d:6f:70:55:5a:f6:11:4fSerial Number (int): 9038566489056481615
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: f3:4f:61:15:f9:de:80:a3:91:71:23:79:69:68:1d:22:aa:0c:2e:0b
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42
Fingerprint (sha1): a4:9a:e9:46:0b:4d:a0:6e:8d:37:8a:ca:b4:9f:a1:39:60:97:2d:4e
Fingerprint (sha256): 79:c2:47:df:d6:39:1d:29:08:97:3a:de:8f:ad:49:2d:b9:ce:02:34:12:81:41:05:58:38:5e:f2:ba:df:d5:1d
Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startcomca.comCRL Distribution Point: http://crl.startcomca.com/sca-server1.crl
Check the revocation status for certificate mail.kopimism.ro
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.kopimism.ro
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.kopimism.ro
Other certificates including the domain name kopimism.ro
(limited to 100 certificates)
Certificate
The complete raw certificate details for mail.kopimism.ro in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCA7WgAwIBAgIIfW9wVVr2EU8wDQYJKoZIhvcNAQELBQAwbDELMAkGA1UE BhMCRVMxFDASBgNVBAoMC1N0YXJ0Q29tIENBMSkwJwYDVQQLDCBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEcMBoGA1UEAwwTU3RhcnRDb20gQlIgU1NM IElDQTAeFw0xNzA3MTgxODE0NDRaFw0xOTA3MTgxMDI0MDBaMCgxCzAJBgNVBAYT AlJPMRkwFwYDVQQDDBBtYWlsLmtvcGltaXNtLnJvMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAi39Tf935Nrx67GWYYwVpbJIRpDNPbZQ7Teqs9PELggCw h11JaTaLfEhLkL33JcT4FHRkfGLEabjZ8oVGdPDb2bi47KbDnSYYmuwMD5KPl4YE elewrwHB7F6HcTTfkW0SROle4NyAezMx7OLB0dZPH0dpfaeQrxJbXLL6hzxO5+ZE ORRQMwLq0rUgjTbzHf4f8k7Z515FsgRGadqDlSitbuVr4uUHkrHkwOcnIwBtPScY 9KmWyc7AkZCh5EImCaRVZWMS1WEVK69Tx61c3FpXqn4fXSxjLeCeo/OzDnwIaGJO EgbH532//VOyYrha0m//n8ZcSzg/qrw9P3ARwI+sHQIDAQABo4IBtTCCAbEwcwYI KwYBBQUHAQEEZzBlMDsGCCsGAQUFBzAChi9odHRwOi8vYWlhLnN0YXJ0Y29tY2Eu Y29tL2NlcnRzL3NjYS5zZXJ2ZXIxLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29j c3Auc3RhcnRjb21jYS5jb20wHQYDVR0OBBYEFPNPYRX53oCjkXEjeWloHSKqDC4L MAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAU+xBLlbE1VS+9YhSpUgISCmjoEkIwUgYD VR0gBEswSTANBgsrBgEEAYG1NwECAzA4BgZngQwBAgEwLjAsBggrBgEFBQcCARYg aHR0cDovL3d3dy5zdGFydGNvbWNhLmNvbS9wb2xpY3kwOgYDVR0fBDMwMTAvoC2g K4YpaHR0cDovL2NybC5zdGFydGNvbWNhLmNvbS9zY2Etc2VydmVyMS5jcmwwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAbBgNV HREEFDASghBtYWlsLmtvcGltaXNtLnJvMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4ICAQBg+xcgM6wIt750ke2bnWC3ukVZWzDvPvFPlG4h7j9k AMaG2WKCNiDjcQ26qYVBe2wuWoRPnhqOIStmVMTF/h8BVdFT/O22ErQXl23h0rbi sZOHOJWTsk/IISg5jsNDo4pbUO6BA2/0TX/nMl0il3n/sZsfmOWWWFakNvU06HLv PbljrNQuZsGiUutp375nxdtqXMhAMQrUyC/g9BQb5DyOdloDsvLMzdx3zjiE9+Vj j35BlLVjGdluKDoM54k9VZA/3bG9HTFsOajl+Bg9ELNVksHUUj5j4x5objOQG+dL yAoU0Rzosi4TMy1bA2fTxRz034xUBqJzOX7bUoTUzDKBUH0HpvhpPIbjaZ7fahj1 d1HYYrYGr71Qn13QHnaIMt628xrooy67frCvucfThAgHHibISUlkQC1G7zPECvYy /8fv7UI6seWou1Qw4Cett79cexgGnSCtnA013VhPpeTGG9DAzWJ8bpIA+fWjMgf1 5ENrpvsgGgD/cRIok5kiZmmTu6LSu1fu60bGyfSazILyfya793m9hNlT37Xn23Av um4l0ujSDf7uUtvzbnhpLT1O2dinq7RGPn30ECEcuBYXg/6u3IBRoVdcWF6vJKv6 1Btu0Ifka4RxpW2pUnzXRoTyDSg9dVcttyT1SiH/7FLjPV0FSm1vGVU0qw0dFJOf 5Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi39Tf935Nrx67GWYYwVp bJIRpDNPbZQ7Teqs9PELggCwh11JaTaLfEhLkL33JcT4FHRkfGLEabjZ8oVGdPDb 2bi47KbDnSYYmuwMD5KPl4YEelewrwHB7F6HcTTfkW0SROle4NyAezMx7OLB0dZP H0dpfaeQrxJbXLL6hzxO5+ZEORRQMwLq0rUgjTbzHf4f8k7Z515FsgRGadqDlSit buVr4uUHkrHkwOcnIwBtPScY9KmWyc7AkZCh5EImCaRVZWMS1WEVK69Tx61c3FpX qn4fXSxjLeCeo/OzDnwIaGJOEgbH532//VOyYrha0m//n8ZcSzg/qrw9P3ARwI+s HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9038566489056481615 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-18 18:14:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 10:24:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.kopimism.ro' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17609911264732493606880171433230256675828136175546860434768290312053124974058315644434435900112882813222054365768002234128199644429523539417528941839796518006662364996074074688748105765567588725168802909745502988677776891105707548634540454772297697970313077711125675721100229848831290664466176000376880850509692463611172095648314894835002531293481717296577937377232069695243235808396424951568258363803209958794868951551859213636551816107594545223197192126893437560638842310778518686594965496843661293556180655996555222343733962036208064084870457410205546934755196740985298990957248661636205626960452291845814693637149 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f34f6115f9de80a39171237969681d22aa0c2e0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kopimism.ro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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