blog.mbentley.net

Issued by StartCom Class 1 Primary Intermediate Server CA

About this certificate


This digital certificate with serial number 07:e4:6b was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Cerificate errors/warnings *beta

  • KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([2.5.29.18])
  • Certificate contains a key usage different from ClientAuth or EmailProtection
  • Certificate has key usage [KeyAgreement] set
  • Certificate doesn't contain any subjectAltName

blog.mbentley.net

Country: US

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e4:6b
Serial Number (int): 517227
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId: f1:82:da:30:d1:0d:95:b7:7f:d1:37:d9:0a:ae:7e:c4:b5:da:07:be
AuthorityKeyId: eb:42:34:d0:98:b0:ab:9f:f4:1b:6b:08:f7:cc:64:2e:ef:0e:2c:45

Fingerprint (sha1): e2:75:1c:74:30:75:47:02:29:5a:43:21:ae:5b:e3:e4:32:e6:f4:63
Fingerprint (sha256): 73:08:80:e4:41:84:59:8a:4e:96:e7:73:8a:95:83:df:9c:a6:d2:f4:67:f0:e5:0e:20:04:a8:0b:33:79:30:8d

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class1.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class1/server/ca
CRL Distribution Point: http://crl.startssl.com/crt1-crl.crl

Check the revocation status for the current certificate on blog.mbentley.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.mbentley.net
mbentley.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIDB+RrMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJ TDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0 YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3Mg MSBQcmltYXJ5IEludGVybWVkaWF0ZSBTZXJ2ZXIgQ0EwHhcNMTIxMDI5MDE0NTI5 WhcNMTMxMDI5MTkxMjQzWjBsMRkwFwYDVQQNExBTb01QcnUzRVhnYkhVQktZMQsw CQYDVQQGEwJVUzEaMBgGA1UEAxMRYmxvZy5tYmVudGxleS5uZXQxJjAkBgkqhkiG 9w0BCQEWF3Bvc3RtYXN0ZXJAbWJlbnRsZXkubmV0MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA4OQ+nrFFo+Z88+wKdsdtNzwGw/OtsWVuDmbGHo6AG5L+ Bx8rYW2IlvZvKg6B5OFpZqhhw/8lzUziDL7lNDVUUeHu9IT0Wha7npgsZV23tSPT E0TLhWf9to9v8uZCR9H84Qf9vTFVXlriGKlbBHdfR6rl6iLfCKHF5aobdRcAHrDJ IbhiywIl8VGETgzO/2uGwubE1JUqLuKEaz2eRnxeb/d0vuYKw67iyXOxExljizZD Ap2w/hCqzUVAlVMgu1r3xbvdNuqZZlp94Ur8MHu/W/3kB7NNudNzk+Eq58EnXLVU 0sDg+HgYh61a8eQFcnACmFnG3MV/MTcC/Rnejc0IUwIDAQABo4IDrzCCA6swCQYD VR0TBAIwADALBgNVHQ8EBAMCA6gwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0O BBYEFPGC2jDRDZW3f9E32QqufsS12ge+MB8GA1UdIwQYMBaAFOtCNNCYsKuf9Btr CPfMZC7vDixFMCoGA1UdEQQjMCGCEWJsb2cubWJlbnRsZXkubmV0ggxtYmVudGxl eS5uZXQwggIhBgNVHSAEggIYMIICFDCCAhAGCysGAQQBgbU3AQICMIIB/zAuBggr BgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0Bggr BgEFBQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBk ZjCB9wYIKwYBBQUHAgIwgeowJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkwAwIBARqBvlRoaXMgY2VydGlmaWNhdGUgd2FzIGlzc3VlZCBhY2NvcmRp bmcgdG8gdGhlIENsYXNzIDEgVmFsaWRhdGlvbiByZXF1aXJlbWVudHMgb2YgdGhl IFN0YXJ0Q29tIENBIHBvbGljeSwgcmVsaWFuY2Ugb25seSBmb3IgdGhlIGludGVu ZGVkIHB1cnBvc2UgaW4gY29tcGxpYW5jZSBvZiB0aGUgcmVseWluZyBwYXJ0eSBv YmxpZ2F0aW9ucy4wgZwGCCsGAQUFBwICMIGPMCcWIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MAMCAQIaZExpYWJpbGl0eSBhbmQgd2FycmFudGllcyBh cmUgbGltaXRlZCEgU2VlIHNlY3Rpb24gIkxlZ2FsIGFuZCBMaW1pdGF0aW9ucyIg b2YgdGhlIFN0YXJ0Q29tIENBIHBvbGljeS4wNQYDVR0fBC4wLDAqoCigJoYkaHR0 cDovL2NybC5zdGFydHNzbC5jb20vY3J0MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSB gTB/MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2Ns YXNzMS9zZXJ2ZXIvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wu Y29tL2NlcnRzL3N1Yi5jbGFzczEuc2VydmVyLmNhLmNydDAjBgNVHRIEHDAahhho dHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQEFBQADggEBAFtx/WUG FX8ExlNY800lW91YDBRRkCA3Qd09UPWYrvG5V/2fc5NsP1XWzuthKr2J3Xf01Yw2 IGOjo5rBYmAS3wibXkIztD27j98l6e3NtwY5z/PqUsQ+FU5TyytoZxjI9MSZGcLY +zoGu2kqTU4f+wv2BQcGnmNJH+H2CxrDDj0V4UZU1bqeChqNvo9ZjEUjY139WZed ZPWlreacbapd0r8Hi0WGgZyTrQC5hAXfefBEoAzaNMfqciGC4uNaKIQRRSaCMhd4 MCLYzKOw6zBnOBRvieewbnCuuxQYYwvycSzS1GisZANt1cZ4tJN5iINCQO6GuX/y 60rRsZ3xzun+UPo= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OQ+nrFFo+Z88+wKdsdt NzwGw/OtsWVuDmbGHo6AG5L+Bx8rYW2IlvZvKg6B5OFpZqhhw/8lzUziDL7lNDVU UeHu9IT0Wha7npgsZV23tSPTE0TLhWf9to9v8uZCR9H84Qf9vTFVXlriGKlbBHdf R6rl6iLfCKHF5aobdRcAHrDJIbhiywIl8VGETgzO/2uGwubE1JUqLuKEaz2eRnxe b/d0vuYKw67iyXOxExljizZDAp2w/hCqzUVAlVMgu1r3xbvdNuqZZlp94Ur8MHu/ W/3kB7NNudNzk+Eq58EnXLVU0sDg+HgYh61a8eQFcnACmFnG3MV/MTcC/Rnejc0I UwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded