hepdata.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 41:17:99:f6:4e:3d:64:52 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hepdata.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:17:99:f6:4e:3d:64:52
Serial Number (int): 4690386820083311698
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 57:78:eb:1e:f0:b1:9d:9a:d3:92:23:ea:63:f3:2d:9f:ca:49:7c:e1
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): fe:72:82:ac:4e:03:40:1d:11:17:51:70:b3:7e:06:a9:44:74:f9:4e
Fingerprint (sha256): 85:73:c0:6f:ed:fd:08:f7:68:93:32:92:06:8a:df:c9:66:3c:10:89:8c:d6:09:20:cc:be:34:7a:84:1a:aa:9e

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl

Check the revocation status for certificate hepdata.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hepdata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hepdata.com
www.hepdata.com

Other certificates including the domain name hepdata.com

(limited to 100 certificates)
status.hepdata.com
status.hepdata.com
m.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
qanda.spaceshipsrentals.co.nz
*.hepdata.com
aluminateus.com
help.ciclolabs.com
status.hepdata.com
status.hepdata.com
help.ciclolabs.com
helpp.medtoureasy.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
support.smobot.com
blog.hepdata.com
hepdata.com
help.ciclolabs.com
help.ciclolabs.com
m.hepdata.com
www.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
blog.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
qanda.spaceshipsrentals.co.nz
intouch.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
status.hepdata.com
qanda.spaceshipsrentals.co.nz
help.ciclolabs.com
support.intersect.co.uk
aluminateus.com
aluminateus.com
aluminateus.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
aluminateus.com
help.ciclolabs.com
hepdata.com
www.hepdata.com
www.hepdata.com
help.ciclolabs.com
status.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
www.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
hepdata.com
blog.hepdata.com
help.ciclolabs.com
aluminateus.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
a1supportcontroller.checkventory.com
qanda.spaceshipsrentals.co.nz
status.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
www.hepdata.com
support.hightechtelecom.net
status.hepdata.com
aluminateus.com
status.hepdata.com
help.ciclolabs.com
support.berto.media
aluminateus.com
support.hepdata.com
help.ciclolabs.com
status.hepdata.com
status.hepdata.com
intouch.hepdata.com
aluminateus.com
hepdata.com
m.hepdata.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
a1supportcontroller.checkventory.com
a1supportcontroller.checkventory.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
help.ciclolabs.com
status.hepdata.com
help.ciclolabs.com
intouch.hepdata.com
status.hepdata.com
a1supportcontroller.checkventory.com

Certificate

The complete raw certificate details for hepdata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X4Y5Tsxbj9RUzyHkny8
yAvSd/egaWvnlQ7KbpImScLTcwiDK97Dsbn7RTyG5CgYkauEEcvxrLMuOOQp5g5v
gmpxb+EZj8vg3aBboWVpJOf88lo8diKUYptrQD1yEtXB1zkXJdjU/+LvVnRZ5+69
V7SPXtz2EGa0UbG1ygbWPNg/smhhBvKWk1U3n7xI0RL7bV3pKB1ObZCrZQTK6XV3
0Ug4rvT/ydaJ1ahtm2NYTvfafpk9w3eIZefSHwThQ3Bys8Dd8xknoZk6avsDxtIa
J7SPwo+dzexzaGrR3CixgF3D3DYK5jLJtrIweo9+axBkr3Pk1QLdMgQXZVtZJN0D
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4690386820083311698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 21:25:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 19:40:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hepdata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29980659147354352696015251188631579689674141263828219779288478431980884459884081148524601247309488119516540747240392752565663131579354703790694735206695201657362864344227865483840971541427861909326610671055969742847536611106830631660100779225455843284745838769624221411800480594401080011106956764544085262867303070166817017589959572397511486041737441196688278829818656739095527678438987647049142380472770992122846569137720403413502560756552728672546958699599043193203742898968854065447698155869851080914251574574813421797987089594973842546922122913197153673751417861069001376648353977592144743357935115805385914385261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepdata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5778eb1ef0b19d9ad39223ea63f32d9fca497ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bbee09bb8000004030047304502204ca153b613d29c3a15736978b22117d3b48f73022f7aa3ec25bc0a6a69e422c40221009c117c13d5390efd6cb0072c813142c1217c250617647757f433b50ce1e492d80076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016bbee09f0600000403004730450220318f384f6e516c630d24bdb0400669bdcc455d19c570a886a222ee147b989d85022100f5016d25ef17ed6f2b4d8f33b2b3793c36124c406fdd2e73eedc8f4dae50e92b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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