*.sofiri.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ed:2b:d0:de:4f:68:0c:3e was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sofiri.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ed:2b:d0:de:4f:68:0c:3e
Serial Number (int): 17089982864221015102
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 7e:d5:aa:8b:f4:46:50:98:60:bf:30:ff:07:22:fa:71:a4:f0:77:54
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 2b:cf:4a:84:d8:14:39:28:60:ac:50:5d:e9:ec:b7:ee:15:4b:a1:04
Fingerprint (sha256): 9f:5c:f6:f7:7e:f1:a5:90:5d:03:43:4d:90:be:28:54:e4:39:ca:d3:1a:ff:ed:4c:f2:b0:34:b0:3b:b0:e9:e0

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-160.crl

Check the revocation status for certificate *.sofiri.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sofiri.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sofiri.com
sofiri.com

Other certificates including the domain name sofiri.com

(limited to 100 certificates)
helpdesk.kiifb.org
careers.page.team
careers.netfosysglobal.com
helpdesk.kiifb.org
helpdesk.kiifb.org
careers.page.team
www.diversitus.com
careers.page.team
synco-test.roadcast.co.in
helpdesk.kiifb.org
sofiri.com
www.granzax.com
careers.bakuun.com
aanamalu.live
sofiri.com
experts.sofiri.com
helpdesk.kiifb.org
students.sofiri.com
www.druidadelser.com
www.support.permassist.com.au
helpdesk.rv-solutions.co.uk
sofiri.com
careers.page.team
nk.gs
recruit.grepsr.com
support.chostar.co.uk
careers.bestaxca.com
jobs.eventsair.com
students.sofiri.com
integrations.sofiri.com
helpdesk.rv-solutions.co.uk
careers.intrascloudservices.com
careers.consultingquest.com
careers.page.team
sofiri.com
helpdesk.rv-solutions.co.uk
support.webfutur.com
sofiri.com
students.sofiri.com
jobs.eventsair.com
careers.sofiri.com
helpdesk.kiifb.org
careers.bestaxca.com
go.idealagent.com
support.myf.io
helpdesk.kiifb.org
careers.midisgroup.com
jobs.dkvagency.com
helpdesk.kiifb.org
experts.sofiri.com
careers.page.team
integrations.sofiri.com
experts.sofiri.com
careers.netfosysglobal.com
students.sofiri.com
sofiri.com
jobs.dkvagency.com
students.sofiri.com
support.iotverlichting.nl
careers.lihimtech.com
imam.sofiri.com
careers.netfosysglobal.com
careers.feelesspayments.com
helpdesk.rv-solutions.co.uk
careers.page.team
integrations.sofiri.com
experts.sofiri.com
careers.page.team
emueaglescamps.com
sofiri.com
experts.sofiri.com
careers.bestaxca.com
integrations.sofiri.com
careers.hgsdigital.com
careers.page.team
students.sofiri.com
dinosarapp.com
careers.page.team
www.granzax.com
pollyze.com
support.mytankinfo.com
integrations.sofiri.com
careers.midisgroup.com
helpdesk.kiifb.org
careers.page.team
helpdesk.rv-solutions.co.uk
careers.page.team
careers.bestaxca.com
sofiri.com
integrations.sofiri.com
helpdesk.kiifb.org
students.sofiri.com
helpdesk.kiifb.org
helpdesk.kiifb.org
careers.nowpay.cash
careers.ckb.com.au
careers.netfosysglobal.com
integrations.sofiri.com
app.sofiri.com
careers.bestaxca.com

Certificate

The complete raw certificate details for *.sofiri.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S9AEbeSn0SYbcmYqfE2
L85HGXRbayy6t/3MOPOUGIG02G7rVyzX/YjCzPRZ+OcELAy67ANf+yk76gMXy0Ge
HO5rRP4rSeR+hOn8J294/2FOMT83tXa7eONtCK/jKnUoPftGQlKucyrXTOxAek22
1/zSGSJH/TnnhXqnqw1Sk/9w7jKrqqrWySK075Qcfx+fCHcpc1gdK8Tvke8Y1Oo3
VTco6Ly+EktvzDjEazeH5l3a7SncxLQ84rOYo4BJuSWRk9UIUAk3gzx9sHx9gBrd
kAVVdYxo4MF+TW9Tewt2fJ0mh2ljElZBtCcJ1lw+gB0FS6RU3AVFhWgg3cf88ysv
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17089982864221015102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:24:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-02 22:24:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sofiri.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28931871813934695577836667279022904969378513657557568039542772687683941616629888623287559102155970056549111878347321729149874823980852967190879687448740273533771002355647827124110023251296909641815829929977016493272072000091185443526801355173869579696449277757551324450513668275867027656712119062779326412761371137163431009076155606157879147279708753705784496806508830234583014563132451210718136922715508387818989708535728408762315535985885744213423811087254520275303429133314218776063522075488563674628367099754692814677921589082052153634224971940556467409113348599083836047626671549007371684249803307581820375871257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-160.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofiri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofiri.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ed5aa8bf446509860bf30ff0722fa71a4f07754
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ec8b6f2d200000403004830460221008e67eb2b33e70245a8244bd81a1a5c9b5203e7115c05fde92e9a91fa262ba29b022100ba3e906d1f0d40d56ab3d00a4c4c71b61bf4d0fd0caa64916376fd48d81eb29d0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec8b6f3b1000004030047304502210093ebe04b796e6d1c339135d76a21e5b2c2393699f251a880b00199b4fccb4cb302206d1078c97d519fb5a5a6e47351c5a7c65511f1ebd1b9e319508a5ae27ba6f3ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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