lab.tierone.pt

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 34:04:7d:be:a5:d3:92:0b:7a:b3:99:3a:40:44:ae:fd was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lab.tierone.pt

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 34:04:7d:be:a5:d3:92:0b:7a:b3:99:3a:40:44:ae:fd
Serial Number (int): 69143175374121898516262111143038070525
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ae:32:64:0b:8e:e7:b3:cb:d6:4e:16:1c:26:9d:dd:b1:54:5b:f9:97
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 4a:4f:67:f9:69:49:f9:18:9f:64:ba:f0:06:ba:fa:58:dc:4c:54:8a
Fingerprint (sha256): bd:b2:ac:a0:9c:80:bc:58:5e:66:da:23:7c:93:18:ba:70:7c:af:fd:25:c2:c3:a0:6d:7f:6f:43:9b:37:47:88

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate lab.tierone.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lab.tierone.pt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lab.tierone.pt

Other certificates including the domain name tierone.pt

(limited to 100 certificates)
tierone.pt
www.tierone.pt
www.tierone.pt
redmine.tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
mx.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
mx.tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
tierone.pt
webmail.tierone.pt
www.tierone.pt
tierone.pt
www.tierone.pt
lab.tierone.pt
tierone.pt
mx.tierone.pt
tierone.pt
scm.tierone.pt
tierone.pt
webmail.tierone.pt
mx.tierone.pt

Certificate

The complete raw certificate details for lab.tierone.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69143175374121898516262111143038070525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-30 00:32:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-30 00:32:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lab.tierone.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791872195251877127811899570446347349811046654162587462556053740851321991434902078344692094224449593787487428858610649688661702695220960867701175078614247621769492894251179554972531229533243294579145427820536175751194077700368142741206981227968950375880494087401360714683022390839329220618406802723123638419255748361661432565270476573640774017301695173171896846057320678822141433887633024867656036638291248145167114803405762919998733606531630550002844835239636614683304954501448201905007735220201588625907364609647689873926537477117247250804131436927151597598721435655080982567165363653018042913488459334795705024007077873574424101458313766281833936804728281137611662468317780470927944533723815026144954544911273367847026288336526349477803231066041848497192121360154456033982055898753224860816635037758110619642630597861338515191469659545245843199214941079244914490493091326497873872330841399451855707266707472418240193243593029512551468841960254982451765505456123440733640762208847530633215678314176786688691302774981886202005100016259235083572933257071927615951579930778102159646422910431865776031046356446486262568225867606737435991203372485059672817493113268825872597780388364546155218251459458070026954650459829429125308164137701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae32640b8ee7b3cbd64e161c269dddb1545bf997
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.tierone.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ef0fc56af9e8f5a501c36f7e05faf0a0d372b13b317ee02bb7c5e1fcced4e3e06cc9fecf1615d005d81ed5a1fa047a29ff74ae287c25ab5c449d24a717f99a54909ddc967b91d5334d113c2b391be8e7c1758276f0c36c8bb5c095bf69da8658dad2b5dad39b1f6ffc96b4196a1618353a028e3842c6131a829a768bdebaa6d7620b36689e7f03a047ae218be1af56b9ce9bec70313e41f65a035910debbbe80369272129f9b73e7012401c8b7e10df58f3e8336b8af008a2e7d518c9c8791211bca45056184ef3cecf80de67b6eced7fbef7721f0c4a27278a7329af896ae2bd80c6bd1e3a4d633658e77ea9a011a23990b2d9a1e713cbf1f2acfd87802876