www.heritageverification.com

Issued by StartCom Class 1 Primary Intermediate Server CA

About this certificate


This digital certificate with serial number 0a:1c:08 was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Cerificate errors/warnings *beta

  • KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([2.5.29.18])
  • Certificate has key usage [KeyAgreement] set
  • commonName field is deprecated
  • emailAddress field is deprecated

www.heritageverification.com

Country: US

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:1c:08
Serial Number (int): 662536
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 7a:bc:89:d1:3d:31:c7:9c:e6:be:84:8b:e6:41:4c:d7:d6:bf:8e:9c
AuthorityKeyId: eb:42:34:d0:98:b0:ab:9f:f4:1b:6b:08:f7:cc:64:2e:ef:0e:2c:45

Fingerprint (sha1): 0f:33:c3:c7:a7:fb:8a:e1:3c:26:ad:21:b2:52:c1:41:6d:1e:5b:5d
Fingerprint (sha256): 92:be:ea:73:b5:3e:68:26:51:37:fc:9a:e7:25:92:0e:05:c2:dd:8d:bf:69:40:69:40:6e:69:50:33:54:f7:9e

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class1.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class1/server/ca
CRL Distribution Point: http://crl.startssl.com/crt1-crl.crl

Check the revocation status for the current certificate on www.heritageverification.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.heritageverification.com
heritageverification.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIDChwIMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJ TDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0 YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3Mg MSBQcmltYXJ5IEludGVybWVkaWF0ZSBTZXJ2ZXIgQ0EwHhcNMTMwNDI1MDg0NTI1 WhcNMTQwNDI2MTYxNTQxWjCBgjEZMBcGA1UEDRMQY09zMjh4UW4wdjdxNDBGaTEL MAkGA1UEBhMCVVMxJTAjBgNVBAMTHHd3dy5oZXJpdGFnZXZlcmlmaWNhdGlvbi5j b20xMTAvBgkqhkiG9w0BCQEWIndlYm1hc3RlckBoZXJpdGFnZXZlcmlmaWNhdGlv bi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCq84f12AYfaNC 6VVT+kWWW0oZKVe/x7jumIMEGOcIBozdnzIK+7NDKo+viCbDh11fUiYHKs+0IhWJ 4yTOeIjjpK7W9HIklclEnp/YkPOPewoUN8eYqfG9H2w+VIW4RLEoeD3Qrgo8k7qJ 14VK6qKlch2DX8Jziz3aWItLNGVge+6yi2vk57zdKo4Ia2Ux2yl8tNBKcxaSyDri F26IhpYtQ7mlvumxu8yNUA3qUf/bdDkGZji+fQpDE8mldyxSuLmmwGqP+xqGe83K 17rWslSsTAn+pKQL+sxbpbcqDujacF4fP97ckLeSUCbs3r2QYSNSEXoiCG35VeoX gRbpkP7VAgMBAAGjggL7MIIC9zAJBgNVHRMEAjAAMAsGA1UdDwQEAwIDqDATBgNV HSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQUeryJ0T0xx5zmvoSL5kFM19a/jpww HwYDVR0jBBgwFoAU60I00Jiwq5/0G2sI98xkLu8OLEUwQQYDVR0RBDowOIIcd3d3 Lmhlcml0YWdldmVyaWZpY2F0aW9uLmNvbYIYaGVyaXRhZ2V2ZXJpZmljYXRpb24u Y29tMIIBVgYDVR0gBIIBTTCCAUkwCAYGZ4EMAQIBMIIBOwYLKwYBBAGBtTcBAgMw ggEqMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3ku cGRmMIH3BggrBgEFBQcCAjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eTADAgEBGoG+VGhpcyBjZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29y ZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0 aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBvbmx5IGZvciB0aGUgaW50 ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5aW5nIHBhcnR5 IG9ibGlnYXRpb25zLjA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3JsLnN0YXJ0 c3NsLmNvbS9jcnQxLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUH MAGGLWh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MxL3NlcnZlci9j YTBCBggrBgEFBQcwAoY2aHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3Vi LmNsYXNzMS5zZXJ2ZXIuY2EuY3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tLzANBgkqhkiG9w0BAQUFAAOCAQEAZUU0gSnuad/jOSWIafJuGyE6 mcSTnGRcRhxWRtVH/5jnMXoAlxs3GntyMgb/OnYqZfLhVkoJkXUlKcdyGAqvptTF GuZ5iIvp1/6w/yn0Q590BExIhZaOyU3TUIZQw6TttAHlTcZmfTZuOEsziXX+bXH9 jMdfpDPHNuklvhQ1hRNM0MYXNBQvuUNGbjEKdzMbK5K+PmEV6z6xIOXm1TuABPd1 uTctGz2nfA7E89T9QyvtQLQtoYwMSkV6tKvS8lrEZuBR8E6QqPqnCOq/LVVnuTDc igpPh/YssxGDi5hsWiALL3Y6RXWRH7yWvBfz6/TTO+NuILQuk2y8kQXFWq2GqQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqvOH9dgGH2jQulVU/pF lltKGSlXv8e47piDBBjnCAaM3Z8yCvuzQyqPr4gmw4ddX1ImByrPtCIVieMkzniI 46Su1vRyJJXJRJ6f2JDzj3sKFDfHmKnxvR9sPlSFuESxKHg90K4KPJO6ideFSuqi pXIdg1/Cc4s92liLSzRlYHvusotr5Oe83SqOCGtlMdspfLTQSnMWksg64hduiIaW LUO5pb7psbvMjVAN6lH/23Q5BmY4vn0KQxPJpXcsUri5psBqj/sahnvNyte61rJU rEwJ/qSkC/rMW6W3Kg7o2nBeHz/e3JC3klAm7N69kGEjUhF6Ight+VXqF4EW6ZD+ 1QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded