dkw.io

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 27:72:16:e0:b2:0b:71:a0:a1:68:76:bc:3f:a8:cc:5f was issued on by StartCom Ltd..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dkw.io,C=CA

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 27:72:16:e0:b2:0b:71:a0:a1:68:76:bc:3f:a8:cc:5f
Serial Number (int): 52432277692706539447599375531786161247
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5a:9c:06:ae:9c:49:ba:9b:44:bd:2f:00:bd:36:9b:7b:09:44:e3:3f
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 20:6e:3a:81:4c:61:35:05:20:ae:8e:a6:5f:17:6f:3d:d5:24:36:ed
Fingerprint (sha256): ad:a2:7c:87:92:b7:de:e3:0e:97:da:17:22:dd:c5:cc:86:2d:ca:12:3d:9c:22:4c:5e:b2:de:bf:7a:a3:81:98

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate dkw.io

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dkw.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dkw.io
mail.dkw.io
spartan.dkw.io

Other certificates including the domain name dkw.io

(limited to 100 certificates)
dkw.io
gitea.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
csci.dkw.io
*.dkw.io
ka.dkw.io
*.dkw.io
karen.dkw.io
dkw.io
karen.dkw.io
clc.dkw.io
dkw.io
*.dkw.io
*.dkw.io
*.dkw.io
dkw.io
dystoria.dkw.io
spartan.dkw.io
*.dkw.io
clc.dkw.io
dkw.io
nsat.dkw.io
karen.dkw.io
*.dkw.io
dns.dkw.io
*.dkw.io
dkw.io
ip.dkw.io
spartan.dkw.io
dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
gitea.dkw.io
nsat.dkw.io
dkw.io
dkw.io
dkw.io
karen.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
vs.dkw.io
taiga.dkw.io
*.dkw.io
dystoria.dkw.io
*.dkw.io
dystoria.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
*.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
*.dkw.io
*.dkw.io
ip.dkw.io
dkw.io
karen.dkw.io
nsat.dkw.io
*.dkw.io
ip.dkw.io
cloud.dkw.io
dkw.io
dkw.io
dkw.io
*.dkw.io
taiga.dkw.io
dkw.io
vs.dkw.io
dkw.io
*.dkw.io
cloud.dkw.io
*.dkw.io

Certificate

The complete raw certificate details for dkw.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52432277692706539447599375531786161247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-07 18:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 18:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dkw.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768050504344718611930238855023626482042585233715660444011299981551280636600537993226094084096208747542445054173787859936977394736031346663997786105789427483658633064235176962933718320539733217992578909058148646033977616426018104605048936151666225499715007657983701497025839407299856800919394827003666674925033842217745981861570632039326474470981551925106507668625799023319235933084807377372983502290206047835609695005759711415172389620711013221314862514538424839538866803921301234228228067283155988998986189977852010629626334121663930075084854432293791941034127402832872555385534559530422207291281415377047506333010988106320476184551373777878997860901320169009961839783333263201737472881516894967393359766266758169379424585011469143091515617889900464590416053984713921724460955877906797056638813034830169379985776875554736005783785491683120134794912562232993981418626014306102596522076104839624896923747773726775683646987830150211836663363393251389749002032523997314225865444342674386099865722449995632826920126820511457454699768043204799477372934988486998246354714739995162448576556430331145013944477846244078974058533269502204391797261249589825865006662648205105463900702022894195904921315125269277265731740858810238910856600955453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a9c06ae9c49ba9b44bd2f00bd369b7b0944e33f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkw.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dkw.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartan.dkw.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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