magicksecurity.com

Issued by StartCom Class 1 DV Server CA

About this certificate


This digital certificate with serial number 36:8b:ac:02:d2:78:cb:22:d0:11:6f:5c:4d:bb:80:6f was issued on by StartCom Ltd. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([2.5.29.18])

magicksecurity.com

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 36:8b:ac:02:d2:78:cb:22:d0:11:6f:5c:4d:bb:80:6f
Serial Number (int): 72503529833767833736427342413206093935
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d1:fc:2e:2e:04:eb:27:58:8d:aa:21:6e:a0:76:84:5b:49:0e:0c:c9
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): a1:04:7a:e8:4f:65:58:7b:e8:d7:00:75:e0:8d:6b:45:6f:7e:89:00
Fingerprint (sha256): d9:85:02:9d:a2:49:64:e9:8f:46:54:7d:07:63:cb:20:4f:04:1c:87:4d:ad:ac:1d:93:9e:84:7c:b7:ec:03:82

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for the current certificate on magicksecurity.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

magicksecurity.com
www.magicksecurity.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgIQNousAtJ4yyLQEW9cTbuAbzANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE1MTIyOTE5NTMyM1oXDTE2MTIy OTE5NTMyM1owHTEbMBkGA1UEAwwSbWFnaWNrc2VjdXJpdHkuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnw1P6gSM/zTg/bGTRdcpfC+jX5t7gjir Gr5oALY+0dli1HIqqet2eQsCuviyxcOMZzeQa1ROOXxE49TDA70OL1gqXu7Wxh/e mpaOb7kW+AkRQF6cyR3tr3lOlvQut/F6Gm9MY9pu/zfX67tOuJ91QlO+VO5ypAuV e7+xKywJJSL1t18P6G2P4X2aK+av2pE6gIeJseluRQq1b/uUdwHLwxiXzapIzVXg SyCDj+2HIPWH/Un+1vDYGlqzguoaHk3ruUayTXNnew0N6epAScmyho54uhCEsqgN 2odFvD9BIz8GQ4fwXtojU2V1HgdPseAabL1ezwkG6C/7aLIoOT/hggWE5MTzvxUT ZQeUGDwX7bZghwMVf3fioQ3KPtoIUVnIHgi/+MSc6qt18ew+zoYcEa2rUc0Ui8q7 frSsgx5cctDF6O2pxKrW/e6cSVsctfHw6F6siovdnRd2PCLQLqOxQPh5Gw40T6/c 5+DdVHc+8R8dC96iD79BcBcgJO96hTuBTaB7r9U2Fvp/CLFG8Qqbn/J7FVq+4kAH g/UUqlUWMckZ6nMnD6YXyprT4FCtI5e+65C4AyQZAI1bPPPL2HIYGhleDBN0iIDQ yFlBVeYPBWw/LiFO8bHXdFnY8zpFlQEJvSTulWVgZChBa9LuVl+mn+CZoXdlIE2m W/SpGzG7Ga8CAwEAAaOCAdQwggHQMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAgYIKwYBBQUHAwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQU0fwuLgTrJ1iN qiFuoHaEW0kODMkwHwYDVR0jBBgwFoAU15FOAcSwv/jIZ5NEnOcz+q2TDK8wbwYI KwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5j b20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3Nj YS5zZXJ2ZXIxLmNydDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0 c3NsLmNvbS9zY2Etc2VydmVyMS5jcmwwNQYDVR0RBC4wLIISbWFnaWNrc2VjdXJp dHkuY29tghZ3d3cubWFnaWNrc2VjdXJpdHkuY29tMCMGA1UdEgQcMBqGGGh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tLzBQBgNVHSAESTBHMAgGBmeBDAECATA7BgsrBgEE AYG1NwECBDAsMCoGCCsGAQUFBwIBFh5odHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9w b2xpY3kwDQYJKoZIhvcNAQELBQADggEBAH2vfZGwPl0ccYe2H9CZ/ur6tloiNlxV F/7Y6HhsisfUKYX49UHu4ZsPzxS/jfEFz93BiPutkxRwZIRFJ6oeoXQU2KQJMXLe bKxSHdSFn70swC7QS32wWH06nrV4noL2AjwCaFhrxkWu7c+LAXOMbhvnJ2IAexvm VAmwyJbnr8G7gxlKtgGGWNAemY1JhNYiy8n1W5Sm4Kc58TfWZYPGpJ7NqLjJSTeE J/doCTVDkxowQ3RhV+NlJ4shAhGIj5No3Uo4maqCV1kL4C5frYhQoxsunVjFtuAa 073fNuBvosmmzdqh/5zhFRIR+npHrBHaW1nYWFpHkkraNDKm5RmPRrI= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnw1P6gSM/zTg/bGTRdcp fC+jX5t7gjirGr5oALY+0dli1HIqqet2eQsCuviyxcOMZzeQa1ROOXxE49TDA70O L1gqXu7Wxh/empaOb7kW+AkRQF6cyR3tr3lOlvQut/F6Gm9MY9pu/zfX67tOuJ91 QlO+VO5ypAuVe7+xKywJJSL1t18P6G2P4X2aK+av2pE6gIeJseluRQq1b/uUdwHL wxiXzapIzVXgSyCDj+2HIPWH/Un+1vDYGlqzguoaHk3ruUayTXNnew0N6epAScmy ho54uhCEsqgN2odFvD9BIz8GQ4fwXtojU2V1HgdPseAabL1ezwkG6C/7aLIoOT/h ggWE5MTzvxUTZQeUGDwX7bZghwMVf3fioQ3KPtoIUVnIHgi/+MSc6qt18ew+zoYc Ea2rUc0Ui8q7frSsgx5cctDF6O2pxKrW/e6cSVsctfHw6F6siovdnRd2PCLQLqOx QPh5Gw40T6/c5+DdVHc+8R8dC96iD79BcBcgJO96hTuBTaB7r9U2Fvp/CLFG8Qqb n/J7FVq+4kAHg/UUqlUWMckZ6nMnD6YXyprT4FCtI5e+65C4AyQZAI1bPPPL2HIY GhleDBN0iIDQyFlBVeYPBWw/LiFO8bHXdFnY8zpFlQEJvSTulWVgZChBa9LuVl+m n+CZoXdlIE2mW/SpGzG7Ga8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 72503529833767833736427342413206093935 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-29 19:53:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-29 19:53:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'magicksecurity.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648875550929468497586402108119382615648200036847186564302073682555378863619381399597372227002730518289688756830056422307360422092186162150973758818276832107634789485254434981085674302808504051043773605681688734129736308727655003722107209156231653337344521044679343666262112504809557830816437069770914708678452145929807301507326649090333851350690277571109698409557019813042218441222683269883570550315933729049854974256447911883601532219896655577670284608294101092803574945581917474922072256256819044226334427273667514218251959731636540332455458915035058123870562493477691848997508930794651067233981438763770524927071244531395084097361287045531947120756684383118423062158451791626095427739982319368931212798533820451680295846608859138626260112032707746054011287727326024211562252741600891806440735856056846575462664025823139827770000616260099903817585536513659846993431482677482447770339124660634511948993574140054767189187043612298784344475059299620923815402283932713002150511556322162793681116121381888152789757337315252933616316107314584667869506802657250023952248329658424295930362281878049165432091461332846218913624563998656149315958248042702869564339600573326816036551974720457591409242015333879433931495084202997753569464752559 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d1fc2e2e04eb27588daa216ea076845b490e0cc9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicksecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicksecurity.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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