blog.natalieandjoshua.com

Issued by StartCom Class 1 Primary Intermediate Server CA

About this certificate


This digital certificate with serial number 0a:43:cb was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • WARNING: Certificate contains unknown extension ([2.5.29.18])
  • ERROR: Certificate has key usage [KeyAgreement] set

blog.natalieandjoshua.com

Country: US

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: Secure Digital Certificate Signing
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:43:cb
Serial Number (int): 672715
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: b8:a3:a1:9d:99:52:3a:2b:99:18:ca:91:c4:74:9b:ec:a7:fd:b9:64
AuthorityKeyId: eb:42:34:d0:98:b0:ab:9f:f4:1b:6b:08:f7:cc:64:2e:ef:0e:2c:45

Fingerprint (sha1): e5:0c:d1:be:a3:c5:c6:30:cb:70:a5:d5:d5:52:54:a9:f2:31:7b:fc
Fingerprint (sha256): a9:f3:a2:e9:eb:88:36:95:48:9f:5f:7c:17:ee:e0:14:22:5e:0c:56:69:7f:32:ef:8a:d1:b7:af:04:57:fb:09

Issuing Certificate URL: http://aia.startssl.com/certs/sub.class1.server.ca.crt

Revocation information

OCSP Server: http://ocsp.startssl.com/sub/class1/server/ca
CRL Distribution Point: http://crl.startssl.com/crt1-crl.crl

Check the revocation status for the current certificate on blog.natalieandjoshua.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.natalieandjoshua.com
natalieandjoshua.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHlTCCBn2gAwIBAgIDCkPLMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJ TDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0 YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3Mg MSBQcmltYXJ5IEludGVybWVkaWF0ZSBTZXJ2ZXIgQ0EwHhcNMTMwNTA3MjIxMzU1 WhcNMTQwNTA4MTczNDA3WjCBlDEZMBcGA1UEDRMQVjdnaDBMMVljWVVIMDU2MjEL MAkGA1UEBhMCVVMxIjAgBgNVBAMTGWJsb2cubmF0YWxpZWFuZGpvc2h1YS5jb20x RjBEBgkqhkiG9w0BCQEWN2IwYWRkYmMzYThhYjQ2YmJiYjhiOTViN2Q1ZGYxODBl LnByb3RlY3RAd2hvaXNndWFyZC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQC+HSMB1l2FmkLiA9hr6ajTqwCsa3ecdzqSVjrXxeja0v2qfJWuOuBZ //CglkNRhGSXrEG2+/Np0vjMMHYnU3C7lznejQiHhu5ntbnaHKzXSLq40tO9Ud6W KTtnWm1/TgE/rTsUXiRT7bHrw3xG1kBQnGYUezfoYzJaQbOgE6gxvmnmnDzsTIOQ XAA9Jp9a7EDJKBF62WAfLXIvftKsFD4OrAX4EvWvyJ89/gpyIY56b89UYgxwen6T 9hy5tRfQ8OQG4PIVLgqdqL5BHPifXkappnPfBbGs/dksd+Dg1S3935gaej2+Dunt MFLtBLvgjqDr4AUtfMErw39ZP9baTajOwPwmi78H2j9savbKXGeTguGQXvABjqAC vPlSo29FYmbtCNBtc+yX76jUAd+mr+akrsNMgQH3cOTPoMdcFfcCWnEn7IEGfSgw tG8vNZ3FXyC62X8olT0LIDmL5XSnqOlIYrxLsrtop0g+6QnaWcB9VKQXF23pVas2 Fb3MBr0J26YODxv+oMSYqrn19loeLLoRLnai8YvncGRIEmEKUTW+nINb61I+1YVu C86XKGt+CjKgwzoLQMvtQDJmuhK3jpfHwMrOh8lyJRlUXnL0XRN1VLeUQ+OYo+4f 3Xbz2RC458z9hKTNjHwYU9PNHEpTmGZwGHeE5ptDIMIZ6HoEZCwEBQIDAQABo4IC 9DCCAvAwCQYDVR0TBAIwADALBgNVHQ8EBAMCA6gwEwYDVR0lBAwwCgYIKwYBBQUH AwEwHQYDVR0OBBYEFLijoZ2ZUjormRjKkcR0m+yn/blkMB8GA1UdIwQYMBaAFOtC NNCYsKuf9BtrCPfMZC7vDixFMDoGA1UdEQQzMDGCGWJsb2cubmF0YWxpZWFuZGpv c2h1YS5jb22CFG5hdGFsaWVhbmRqb3NodWEuY29tMIIBVgYDVR0gBIIBTTCCAUkw CAYGZ4EMAQIBMIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcCAjCB6jAn FiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBW YWxpZGF0aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5 LCByZWxpYW5jZSBvbmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21w bGlhbmNlIG9mIHRoZSByZWx5aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA1BgNVHR8E LjAsMCqgKKAmhiRodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnQxLWNybC5jcmww gY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwLnN0YXJ0 c3NsLmNvbS9zdWIvY2xhc3MxL3NlcnZlci9jYTBCBggrBgEFBQcwAoY2aHR0cDov L2FpYS5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMS5zZXJ2ZXIuY2EuY3J0 MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG9w0B AQUFAAOCAQEAM0bEXU3W32z87GuIhteMrhQ1LoofWAl1mB6qvkaWPF69t97bSZ1f QhHwqN3jWAO9g/shIQjWTr4qp9t4pDdiv4Iw5qUcrvER4ekMODm0s5Um5P28AlJK M2l6gVrNBEZrwkZ0uljM/IOro2DlmWaOCmlyD1aKKCzMbGXEa/3yD80P2oui2yKb hVp+KNxC9zZugQ6Ov0yCz74Of1cYuqmqFvf0NPt5/B8nhVycPFLnhyyx639EPaKj ZddL9lftSXD8G/uv7AecmfOD15dKD7l7rMqnPReooW17bvxtOVY+pTgyXU6GxS+e hSy0jqIiaW1aGni0SIU4emxDV/7VJWs3Cg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvh0jAdZdhZpC4gPYa+mo 06sArGt3nHc6klY618Xo2tL9qnyVrjrgWf/woJZDUYRkl6xBtvvzadL4zDB2J1Nw u5c53o0Ih4buZ7W52hys10i6uNLTvVHelik7Z1ptf04BP607FF4kU+2x68N8RtZA UJxmFHs36GMyWkGzoBOoMb5p5pw87EyDkFwAPSafWuxAySgRetlgHy1yL37SrBQ+ DqwF+BL1r8ifPf4KciGOem/PVGIMcHp+k/YcubUX0PDkBuDyFS4Knai+QRz4n15G qaZz3wWxrP3ZLHfg4NUt/d+YGno9vg7p7TBS7QS74I6g6+AFLXzBK8N/WT/W2k2o zsD8Jou/B9o/bGr2ylxnk4LhkF7wAY6gArz5UqNvRWJm7QjQbXPsl++o1AHfpq/m pK7DTIEB93Dkz6DHXBX3AlpxJ+yBBn0oMLRvLzWdxV8gutl/KJU9CyA5i+V0p6jp SGK8S7K7aKdIPukJ2lnAfVSkFxdt6VWrNhW9zAa9CdumDg8b/qDEmKq59fZaHiy6 ES52ovGL53BkSBJhClE1vpyDW+tSPtWFbgvOlyhrfgoyoMM6C0DL7UAyZroSt46X x8DKzofJciUZVF5y9F0TdVS3lEPjmKPuH91289kQuOfM/YSkzYx8GFPTzRxKU5hm cBh3hOabQyDCGeh6BGQsBAUCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded