*.art-cura.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 5c:36:3b:74:e8:fa:7b:70 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.art-cura.com

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 5c:36:3b:74:e8:fa:7b:70
Serial Number (int): 6644563673542720368
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: f9:e5:d0:2e:33:98:bb:23:68:e8:a2:13:33:d6:fa:0d:58:c2:55:e4
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 4d:8e:03:fc:69:96:69:b2:ec:6a:32:1a:d2:b1:0d:5b:cf:ba:63:5f
Fingerprint (sha256): d7:d1:d1:20:24:f7:ba:dd:49:0a:51:47:22:7e:0b:8e:6c:4b:b5:f2:6f:b0:0a:cb:b8:93:fd:f8:87:b8:90:42

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-660.crl

Check the revocation status for certificate *.art-cura.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.art-cura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.art-cura.com
art-cura.com

Other certificates including the domain name art-cura.com

(limited to 100 certificates)
forms.uxap.ph
hr.dabhisho.org.za
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
people.tesena.com
survey.ello.co.za
tempus.minuvol.net
surveys.taylormadeportal.com
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
*.art-cura.com
survey.credexo.com
tempus.minuvol.net
survey.ello.co.za
hr.myhotels.sa
tempus.minuvol.net
people.rakshapm.com
*.art-cura.com
art-cura.com
tempus.minuvol.net
keystonesurvey.keystone-solutions.be
survey.ello.co.za
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
captura.blumfx.com
hr.cloudscape.ae
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
art-cura.com
hr.dabhisho.org.za
tempus.minuvol.net
contact.futureim.com.au
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
keystonesurvey.keystone-solutions.be
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
*.art-cura.com
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
survey.art-cura.com
survey.ello.co.za
tempus.minuvol.net
tempus.minuvol.net
art-cura.com
keystonesurvey.keystone-solutions.be
tempus.minuvol.net
hr.myhotels.sa
*.art-cura.com
tempus.minuvol.net
hr.intergears.com
people.rakshapm.com
*.art-cura.com
survey.caljan.com
hr.cloudscape.ae
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
*.art-cura.com
*.art-cura.com
tempus.minuvol.net
tempus.minuvol.net
keystonesurvey.keystone-solutions.be
tempus.minuvol.net
tempus.minuvol.net
art-cura.com
survey.expeditionsresor.se
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
art-cura.com
art-cura.com
tempus.minuvol.net
survey.ello.co.za
survey.ello.co.za
tempus.minuvol.net
tempus.minuvol.net
tempus.minuvol.net
hr.intergears.com
survey.ello.co.za

Certificate

The complete raw certificate details for *.art-cura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6644563673542720368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:05:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:05:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.art-cura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914377132697528279216324951317108815699993139993270914363544715826823582517894257518142255687154301100195222819360660835511603998764032999016925574950492288778054448464581798492833770741649657293356075399992140787333142802162659017425505728124919722134850223688559419546581813115906739726554589681704514147552536999757161403144268349354079356238613213882575540706721895122675781123871566214502676082945936857444754179354084129577256188101972278051581033256903668606756603223125017887511136597026118492557883437250472878471138439049669664287905080329721255900404893861308970267514156406036781235346537279889519458232404143888576074142578754865842992016914896600372322659931739895747730456513696567163989378593127938239693640265776860779661266329025465594836231620277897145510125802091234645318435764829113713490262626878436608132710052435432689665543588731788038490172893346867135850006342551815989517333652898098784579007760663965355844990738350799134038185068663464254257941112089437682609043596753820973906077939652048073380957946599413963666679593221728008757280577989231076901296693358151117239543415719835909330540617525979965555061663327383378046186841553798153235588774904123840100631339253738005384676320676055586126095416749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-660.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art-cura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-cura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9e5d02e3398bb2368e8a21333d6fa0d58c255e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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