lyncdiscover.agat.mobi

Issued by StartCom BR SSL ICA

About this certificate

This digital certificate with serial number 74:5d:5f:db:fb:2e:9a:af was issued on by StartCom CA.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyncdiscover.agat.mobi,C=IL

StartCom CA

Organization: StartCom CA
Organization unit: StartCom Certification Authority
Country: ES

This certificate has expire since

Certificate Details

Serial Number (hex): 74:5d:5f:db:fb:2e:9a:af
Serial Number (int): 8384963479650343599
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 16:d0:f9:02:1d:a6:c9:e1:ef:b3:1d:8d:35:43:f5:ae:94:f1:24:8e
AuthorityKeyId: fb:10:4b:95:b1:35:55:2f:bd:62:14:a9:52:02:12:0a:68:e8:12:42

Fingerprint (sha1): 6b:6e:30:67:96:51:aa:62:d8:33:ca:e2:7d:f1:01:27:f0:fe:48:9f
Fingerprint (sha256): cd:83:0f:b1:bd:e8:20:6f:14:73:ee:32:d9:a2:33:a7:55:2d:56:34:7d:90:7e:7d:c8:c5:b3:4b:b0:d5:91:67

Issuing Certificate URL: http://aia.startcomca.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startcomca.com
CRL Distribution Point: http://crl.startcomca.com/sca-server1.crl

Check the revocation status for certificate lyncdiscover.agat.mobi

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncdiscover.agat.mobi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncdiscover.agat.mobi
skypewebext.agat.mobi
meet.agat.mobi
webcon.agat.mobi
avcon.agat.mobi
dialin.agat.mobi
autodiscover.agat.mobi
exchange.agat.mobi
lyncadfs.agat.mobi
adfsmail.agat.mobi

Other certificates including the domain name agat.mobi

(limited to 100 certificates)

Certificate

The complete raw certificate details for lyncdiscover.agat.mobi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt8EP/JOPdylewELeoW6
JsBW04zJCalAEYmKGRQh2NPIJeqtkfIbr+mU4FN9tmF1ef5qiNlDoKZCybqNOKoD
FlktbYFQ19bV89hi+wESDiiXRdqlnWa4gwLQUZULmKk36CZfS1/yraoZnp/dSg3x
T1fIfjjuVr4OF5mvulu6LaNXB7ysapaTDCF835dguKiQ7v4eeIIUz1DwMeSpH5p9
hB72avArbtmijoZRGZz7ipz8UujFsS31/TIOFP2nfEZ6K2UvRwow2gHB55E47VSG
3BwxFD0ZF97LYMpoKj6o1+Q+8S+vgw5S757DZNXgVtg6Y82+D6NnsNnlzgTL3x1K
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8384963479650343599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'StartCom BR SSL ICA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-23 07:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 00:06:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lyncdiscover.agat.mobi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23085345088422275113132121210717545291226913679214437299376043977264309889328148183211345409722171145523701221099766290299861072611069012896348992534985713576655051087778113998678425876107499550502368533677848924287757031634854093652536770888698912446384225879529775161267607375254535370117062369448398612459798763887602063270567004874461764076079721886500324038850196686939733133201214684806020058616688822869706062966596234651924683600784030607151462369075774722619274919818380048356430020043675624212862268048811637636025489963298816385954665595690447880820284709522273456442095157257180240666923889214033923754699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startcomca.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startcomca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16d0f9021da6c9e1efb31d8d3543f5ae94f1248e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb104b95b135552fbd6214a95202120a68e81242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startcomca.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startcomca.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebext.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avcon.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncadfs.agat.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsmail.agat.mobi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003ad6a05b3e94ead8df710152a79f2fc910a7d0aca01d492f1524618124cdc4d70668628df53c25cd59c22e7cc28379a39c9c69146f029a5b3d622606d433172457528d25af9f992d97c082f6ff4195e2875f7ec8604d2085c00f01a741f1595907a91ed074002849dbe3351a7b2a7e76fedbcc18edec99c53b6c0c87f825bc3246d6f9e80c99a863ae795381a06f9a98e28bd9ae72b981f4b3f20a897acdf2d195883104bb162db3d6059d0dc6e92c077726f5fd46ed7dfce0b818d2625258528badd7921cb73446a2d76c63c39b51730bc7e922463ca98efb27b83dba649c3ca574691a255fc127940ba11ecc7a145475211f75b9c06500217394847f58484a9dc8647af475a40b603d898700d622a299de80a56ccbbc3ad0c62bb2cf2a2d95f9390ff56f99f35b56a5c2e4ca2309a33de32d04712dd8b6fd3abae7c688e3e4e5fbd45d744ea201faa630ae83fb4034aa0c9289c62c4b122997d6c6326c60c975d1c073bc4801cdf446acb084c608a86739d5639849849f560caff506afdb8ee3242a21037fa432d1ca6ef9bb964b5359a3afbc93828db0f3b0b399b84839c83e524c0cc3b82ca9eec33c5fd8cf85cd70627df2a0eaf22f9bc58dff8f5fd95063658344400f9a6c7d3397760e70b5dd0b771e89e1b522a502ab69b258278e6dd0ff045e53e9325e1ed9d36fe2fb77416db29dcd5b3fffe6f2d1559ccfd8f1b8