blog.dreckhaen.de

Issued by StartCom Class 1 Primary Intermediate Server CA

About this certificate


This digital certificate with serial number 05:23:7d:db:33:fd:b2 was issued on by StartCom Ltd. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([2.5.29.18])
  • ERROR: Certificate has key usage [KeyAgreement] set

blog.dreckhaen.de

Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: DE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 05:23:7d:db:33:fd:b2
Serial Number (int): 1446398339055026
Serial Number lenght: 51 bits, 7 octets

SubjectKeyId: df:06:de:76:6a:10:11:23:69:db:83:41:a1:68:d3:b1:09:ba:8a:d8
AuthorityKeyId: eb:42:34:d0:98:b0:ab:9f:f4:1b:6b:08:f7:cc:64:2e:ef:0e:2c:45

Fingerprint (sha1): 06:a5:be:7c:ad:72:fa:14:22:24:8d:8a:84:a8:ca:09:a4:49:42:bf
Fingerprint (sha256): 5c:96:75:e4:b0:da:e5:fe:51:01:1d:45:61:17:b0:c6:19:79:4d:8c:c9:39:a0:38:23:d3:d4:77:f9:b6:43:00

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class1.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class1/server/ca
CRL Distribution Point: http://crl.startssl.com/crt1-crl.crl

Check the revocation status for the current certificate on blog.dreckhaen.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.dreckhaen.de
dreckhaen.de

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIHBSN92zP9sjANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBE aWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENs YXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgU2VydmVyIENBMB4XDTE1MDEzMTE1 NTAyNVoXDTE2MDIwMTE4MzUzMFowUTELMAkGA1UEBhMCREUxGjAYBgNVBAMTEWJs b2cuZHJlY2toYWVuLmRlMSYwJAYJKoZIhvcNAQkBFhdwb3N0bWFzdGVyQGRyZWNr aGFlbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN6UNzcMuvwi 2ORRTYceF1i7IcmbcUT4y6nTIvJ5ELEyLFOu2mwwUvsQqP91x44J/gl1yDyTtUiD 3V9XP/EsY+kl31IKntLr99PXE3BR8qxjB0tMlbx3272ILYG8LP3vIPyiLJAuOSB1 9lk6Q7eGWwETQRi/qZGtUWM28MuWaxnQNHtaTOnI8W7TysbfOX9DYP65FvYxFU2O qMy3RZGvTdbf83Hg6F1XyTCzSy9S3a/Xv9A0SRGonoMngeR2MDF6fMK/ktHRxlyZ DQd17qPZ4yvipl2/rECmMyQ8QRL2sE1dKbxx8plwODKUG4doPWvMw2VgoMYXuIwW F8o9eUYgrTF2xv45067Er0rv1CoYyJDctUKXYH8nLFYqYltVQHA9q9k1dPPgO/2V s5ZnhZG0M1BGBnrGidC9Di/UcvB/yg1su0qfdIJLXjBtEzYhgux1Xk0+lRsrVNcf GLHzOggb6EinP3ra2+d4qOKk7qHC5kEzD3dDkqXlaLC+T+8TJ3bUR2BDG+bqHyul Z5imBDE0zWeyU7NR0By2zKeqEdnNfhYEV+yDkg6yjQJsIyIfCbuG+gX8/fBMu1h1 iC6GEBrUhFM0vGmVbppdVXc4sBs5OTGoF2F0pu9llEFKq3RDUNLSqTGe/lv/qM0Y ahqbQMHC7owQ525FY+WA5Wn4vVmmvwYvAgMBAAGjggLkMIIC4DAJBgNVHRMEAjAA MAsGA1UdDwQEAwIDqDATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQU3wbe dmoQESNp24NBoWjTsQm6itgwHwYDVR0jBBgwFoAU60I00Jiwq5/0G2sI98xkLu8O LEUwKgYDVR0RBCMwIYIRYmxvZy5kcmVja2hhZW4uZGWCDGRyZWNraGFlbi5kZTCC AVYGA1UdIASCAU0wggFJMAgGBmeBDAECATCCATsGCysGAQQBgbU3AQIDMIIBKjAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjCB 9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3Jp dHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRpbmcg dG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhlIFN0 YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVuZGVk IHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBvYmxp Z2F0aW9ucy4wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5zdGFydHNzbC5j b20vY3J0MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1o dHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9zZXJ2ZXIvY2EwQgYI KwYBBQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFz czEuc2VydmVyLmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3Ns LmNvbS8wDQYJKoZIhvcNAQELBQADggEBAF7LiWODw+HPzdD8M9IO8z5RM1I4PQSu Go7giPcLT9o7phD8HQKQ/6KJSF9gbrMvPtNWteFqVhb5LbCEZJBhtFBPqCv8KTAa VOf6TOfQmSAL3tCVzi+vhw6NC4b8sIZxXfYvkd8YT7yOJF/8SAwc2+tmGp31XYZM iALCx8OrfauKReVEpZB4B41BkDCmuX+5azcWYNSetXrCIlAqLGbTI22Cb+MuQ6U/ r0S8V9WtpyRvFCIBAS+iRvHPPfK3Cm9ZIN6BPzpBQFLVsSmzi4BQyM7ugdwh5teZ D8f/atUK8XS7eorGfTyILfZyyjVkcjcauilUBuftTB+4djhSQCv6R+0= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3pQ3Nwy6/CLY5FFNhx4X WLshyZtxRPjLqdMi8nkQsTIsU67abDBS+xCo/3XHjgn+CXXIPJO1SIPdX1c/8Sxj 6SXfUgqe0uv309cTcFHyrGMHS0yVvHfbvYgtgbws/e8g/KIskC45IHX2WTpDt4Zb ARNBGL+pka1RYzbwy5ZrGdA0e1pM6cjxbtPKxt85f0Ng/rkW9jEVTY6ozLdFka9N 1t/zceDoXVfJMLNLL1Ldr9e/0DRJEaiegyeB5HYwMXp8wr+S0dHGXJkNB3Xuo9nj K+KmXb+sQKYzJDxBEvawTV0pvHHymXA4MpQbh2g9a8zDZWCgxhe4jBYXyj15RiCt MXbG/jnTrsSvSu/UKhjIkNy1QpdgfycsVipiW1VAcD2r2TV08+A7/ZWzlmeFkbQz UEYGesaJ0L0OL9Ry8H/KDWy7Sp90gkteMG0TNiGC7HVeTT6VGytU1x8YsfM6CBvo SKc/etrb53io4qTuocLmQTMPd0OSpeVosL5P7xMndtRHYEMb5uofK6VnmKYEMTTN Z7JTs1HQHLbMp6oR2c1+FgRX7IOSDrKNAmwjIh8Ju4b6Bfz98Ey7WHWILoYQGtSE UzS8aZVuml1VdziwGzk5MagXYXSm72WUQUqrdENQ0tKpMZ7+W/+ozRhqGptAwcLu jBDnbkVj5YDlafi9Waa/Bi8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded