email.azevem.com
Issued by StartCom Class 1 DV Server CA
About this certificate
This digital certificate with serial number 45:70:66:04:b0:cb:c3:45:e9:52:96:90:a4:91:34:45 was issued on by StartCom Ltd..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=email.azevem.com
StartCom Ltd.
Organization:
StartCom Ltd.
Organization unit: StartCom Certification Authority
Organization unit: StartCom Certification Authority
Country:
IL
This certificate has expire since
Certificate Details
Serial Number (hex): 45:70:66:04:b0:cb:c3:45:e9:52:96:90:a4:91:34:45Serial Number (int): 92300338134723014273239364133733872709
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: d4:15:9c:19:be:c7:b1:62:57:0f:26:59:6a:75:cf:c2:fa:e0:52:67
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af
Fingerprint (sha1): 5f:26:89:5b:6c:4f:3b:d6:f4:3c:6f:d6:f4:10:f1:1e:1d:b5:82:23
Fingerprint (sha256): f7:0f:d7:07:52:0b:fb:e4:df:67:0c:72:83:2d:94:dc:32:5f:9e:1d:8d:cf:c9:32:46:b3:42:0f:3f:09:d5:eb
Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt
Revocation information
OCSP Server: http://ocsp.startssl.comCRL Distribution Point: http://crl.startssl.com/sca-server1.crl
Check the revocation status for certificate email.azevem.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for email.azevem.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
email.azevem.com
azevem.com
azevem.com
Other certificates including the domain name azevem.com
(limited to 100 certificates)
www.azevem.com
cloud.azevem.com
email.azevem.com
cloud.azevem.com
tasks.azevem.com
web.azevem.com
web.azevem.com
rm.azevem.com
web.azevem.com
cloud.azevem.com
email.azevem.com
cloud.azevem.com
azevem.com
ricardo.azevem.com
email.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
cloud.azevem.com
blox.azevem.com
email.azevem.com
web.azevem.com
email.azevem.com
email.azevem.com
cloud.azevem.com
cronicas.azevem.com
web.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
gais.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
blox.azevem.com
email.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
ricardo.azevem.com
email.azevem.com
cloud.azevem.com
ricardo.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
site.azevem.com
web.azevem.com
email.azevem.com
azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
email.azevem.com
cloud.azevem.com
tasks.azevem.com
web.azevem.com
web.azevem.com
rm.azevem.com
web.azevem.com
cloud.azevem.com
email.azevem.com
cloud.azevem.com
azevem.com
ricardo.azevem.com
email.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
cloud.azevem.com
blox.azevem.com
email.azevem.com
web.azevem.com
email.azevem.com
email.azevem.com
cloud.azevem.com
cronicas.azevem.com
web.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
gais.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
email.azevem.com
web.azevem.com
blox.azevem.com
email.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
ricardo.azevem.com
email.azevem.com
cloud.azevem.com
ricardo.azevem.com
cloud.azevem.com
web.azevem.com
cloud.azevem.com
site.azevem.com
web.azevem.com
email.azevem.com
azevem.com
cloud.azevem.com
web.azevem.com
Certificate
The complete raw certificate details for email.azevem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIQRXBmBLDLw0XpUpaQpJE0RTANBgkqhkiG9w0BAQsFADB4 MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0 Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE1MTIyMzE0MTA0MVoXDTE2MTIy MzE0MTA0MVowGzEZMBcGA1UEAwwQZW1haWwuYXpldmVtLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAKDXlxkPSPpTOne+y2xe3nOIgLigmLY7eljn ti9DVY6voCAKHFzMCPAA00+PpDbB2qoKOdx7M/PHFSAZVBTQRSNFdXbFAsKQcBFe 7yw5cAiFJH1NgkXuLGdMpLVYyLeS3aD/MzqFNn/2wdYusXN3L3HfUqtqZgIv/Myh InNqJW6u10qeRrqPlBOsEU+OJVk/UnDtYwlww3Vr2J72Ah3QT5yQbXGY0vtb/9Vq P4T99vGgxPOFlW5bcmfcatxNZUTVgC5DATwGA4o4J8jGkx+r3lop5VVFRJ4oebOL r4W3OCxOkcC0yZ2nH+E+Emkkbjnwf+4mQteqRMs1ubURpSKpG0ECAwEAAaOCAcYw ggHCMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEw CQYDVR0TBAIwADAdBgNVHQ4EFgQU1BWcGb7HsWJXDyZZanXPwvrgUmcwHwYDVR0j BBgwFoAU15FOAcSwv/jIZ5NEnOcz+q2TDK8wbwYIKwYBBQUHAQEEYzBhMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wOQYIKwYBBQUHMAKGLWh0 dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3NjYS5zZXJ2ZXIxLmNydDA4BgNV HR8EMTAvMC2gK6AphidodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zY2Etc2VydmVy MS5jcmwwJwYDVR0RBCAwHoIQZW1haWwuYXpldmVtLmNvbYIKYXpldmVtLmNvbTAj BgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wUAYDVR0gBEkwRzAI BgZngQwBAgEwOwYLKwYBBAGBtTcBAgQwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vcG9saWN5MA0GCSqGSIb3DQEBCwUAA4IBAQChX+8V7mWg KW3YRkJ4jjL82734EE7necU9hpVIdIkPicxjM9tnTqurMRx3on2ER8hlTEClGUW6 jrR3DXjJa7hVt46BP1cBiOSWDo46jkvC8hzw4lPwlasmzCYwCWUNaiFNkcTJNYVJ 5/8IEPrlV6xtpuZDpEkOY6ymI7T8aUKvSJ7nTWF89VxSqc8nthSM4FAmOzgeMLJZ STUjRrV0IM0lkHVRylDxBsodls4JsJ9XcMio23E27iJ5xJ5yVaX8ohVsgP3TksuG ZqAp0KXvWWn1GU4nvzIYrWael6zhUh97u+TJFyyGEEvUu6+vDBWQ7tZaJPJCKZiV R2mXX4rFA+ue -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNeXGQ9I+lM6d77LbF7e c4iAuKCYtjt6WOe2L0NVjq+gIAocXMwI8ADTT4+kNsHaqgo53Hsz88cVIBlUFNBF I0V1dsUCwpBwEV7vLDlwCIUkfU2CRe4sZ0yktVjIt5LdoP8zOoU2f/bB1i6xc3cv cd9Sq2pmAi/8zKEic2olbq7XSp5Guo+UE6wRT44lWT9ScO1jCXDDdWvYnvYCHdBP nJBtcZjS+1v/1Wo/hP328aDE84WVbltyZ9xq3E1lRNWALkMBPAYDijgnyMaTH6ve WinlVUVEnih5s4uvhbc4LE6RwLTJnacf4T4SaSRuOfB/7iZC16pEyzW5tRGlIqkb QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92300338134723014273239364133733872709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-23 14:10:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-23 14:10:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'email.azevem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20304440297358441748510034623083045299666182032156295512512253210461124536504339257408850428228500927415444432786926060790729108110488543239204545267255262082243605528020512799910525110362726190625151590871039503005975834158114253849338032185383575658756612543729611349866337509445057712980990996626279197610478917712177387568929407539354467996316229169909301656247032292533013449262955511555064748072334166108560322000884938358027888149470703360089556775683638021863052456626827980443034908786902153500027052778168025520938847233671376861681439026636353927627626999297139952224056611860070987197328102833002587429697 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d4159c19bec7b162570f26596a75cfc2fae05267 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.azevem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azevem.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.startssl.com/policy' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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