*.4teamwork.ch

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 4e:a1:3f:da:ad:33:28 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.4teamwork.ch,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:a1:3f:da:ad:33:28
Serial Number (int): 22132343807226664
Serial Number lenght: 55 bits, 7 octets

SubjectKeyId: df:79:60:ce:48:0a:0c:b6:3c:b6:a6:53:84:c9:a4:53:1f:87:49:cb
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 80:1d:6b:ca:30:10:67:0e:ca:91:a2:38:d5:4b:e7:20:25:3e:1f:c2
Fingerprint (sha256): b6:05:f2:d9:e8:1c:27:b4:4a:6c:aa:bf:97:b6:d7:c2:0b:39:96:85:2d:a2:cf:20:41:c7:f6:ea:2b:23:74:28

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-9.crl

Check the revocation status for certificate *.4teamwork.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.4teamwork.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4teamwork.ch
4teamwork.ch

Other certificates including the domain name 4teamwork.ch

(limited to 100 certificates)
ersigen.4teamwork.ch
www.pk-koeniz.ch
www.bgbern.ch
4teamwork.ch
dev.meetings.4teamwork.ch
www.4teamwork.ch
4teamwork.ch
sentry-test.4teamwork.ch
www.4teamwork.ch
unentbaerlich.ch
*.4teamwork.ch
www.4teamwork.ch
www.4teamwork.ch
www.bgbern.ch
newsletters.4teamwork.ch
www.4teamwork.ch
www.4teamwork.ch
newsletters.4teamwork.ch
www.4teamwork.ch
ersigen.4teamwork.ch
ersigen.4teamwork.ch
dev.meetings.4teamwork.ch
www.4teamwork.ch
community.4teamwork.ch
newsletters.4teamwork.ch
community.4teamwork.ch
newsletters.4teamwork.ch
www.bgbern.ch
www.4teamwork.ch
newsletters.4teamwork.ch
www.bgbern.ch
*.4teamwork.ch
www.4teamwork.ch
www.bgbern.ch
www.bgbern.ch
www.bgbern.ch
www.bgbern.ch
www.bgbern.ch
www.4teamwork.ch
newsletters.4teamwork.ch
dev.meetings.4teamwork.ch
www.pk-koeniz.ch
devblog.4teamwork.ch
www.4teamwork.ch
www.bgbern.ch
newsletters.4teamwork.ch
www.4teamwork.ch
4teamwork.ch
*.4teamwork.ch
www.bgbern.ch
www.bgbern.ch
devblog.4teamwork.ch
www.4teamwork.ch
ersigen.4teamwork.ch
ersigen.4teamwork.ch
community.4teamwork.ch
*.4teamwork.ch
www.bgbern.ch
newsletters.4teamwork.ch
*.4teamwork.ch
dev.meetings.4teamwork.ch
www.4teamwork.ch
www.bgbern.ch
unentbaerlich.ch
*.4teamwork.ch
www.4teamwork.ch
*.4teamwork.ch
4teamwork.ch
www.pk-koeniz.ch
www.pk-koeniz.ch
www.bgbern.ch
www.4teamwork.ch

Certificate

The complete raw certificate details for *.4teamwork.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhQugg+SNlZz4e6My11
0cEfweF1HOfi3uhMotGRsKcJuo9sG9FnOutVxs8DeEmfhPi4kxFxHvWzGhLhFZp9
iNPcStccKmGTvA8Hm8Senrd0gcE2U7Pez/MeinjxhyGnIz9kZHMkP46wA0Xh2JLd
fnB4W2w508I02HI3o0tVYjEpXM8tnG/r61OY76qQ9q+ZFbNioNLo4UKYdlB3X+Eo
1BN+3ptQuStzXMj4McJZlyPPjdmn0BsLHmzA1hTAc4VGrLbKNST/E42JJDJleImW
uB4hoS0fshc+RW3Kf/rVflN0Q5xMJFRbL0wq1rDoxE1IU5Cu7uQpZZTlIsu+xXsm
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22132343807226664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-24 10:15:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-08 09:37:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.4teamwork.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19831404220033841077595680330406179566524055552131763622844658723211031781873516156700990377094622375242156808006821350242304716881001228805522683732293503329586282671993872613654769124469623766258717087339013840808673120237548975071520648495255151445854377843622467687406511287521183802375781209086836582183243690869640827848341003146375753904243945787510313427041319781840382147569836375108746139160676981030236452861403490102645071193446900508237375146432941488792769755321002512288070070089744223131472754516844474514741065612657284640534477094018487834133005495785013614537002308513241432786670426323130190079717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4teamwork.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4teamwork.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df7960ce480a0cb63cb6a65384c9a4531f8749cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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