Certificate for Fireware web CA Issued to WatchGuard

Certificate is witin its validity period

Issued by itself (self-signed)

About the Fireware web CA Certificate

This certificate with serial number 5b:60:7f:74 for Fireware web CA was issued on by WatchGuard.

This Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for Fireware web CA provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Basic Constraints extension is marked as non-critical basicConstraints MUST appear as a critical extension (RFC 5280: 4.2.1.9)
  • Root and Subordinate CA certificates MUST have a countryName present in subject information (BRs: 7.1.2.1)
  • Root and Subordinate CA certificate keyUsage extension MUST be marked as critical (BRs: 7.1.2.1)
  • Root CA certificates MUST have Key Usage Extension marked critical (BRs: 7.1.2.1)
  • CA certificate with an RSA key and key usage keyCertSign and/or cRLSign has additionally keyEncipherment and/or dataEncipherment key usage If Key usage value keyCertSign or cRLSign is present in a CA certificate both keyEncipherment and dataEncipherment SHOULD NOT be present (RFC 3279: 2.3.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

WatchGuard

Organization: WatchGuard
Organizational unit: Fireware

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 5b:60:7f:74
Serial Number (int): 1533050740
Serial Number Length: 31 bits, 4 octets

Subject Key Identifier: 24:4a:2d:99:f7:e3:1b:e5:70:fd:3c:60:6b:1d:99:31:5e:f8:78:ff
Authority Key Identifier: 24:4a:2d:99:f7:e3:1b:e5:70:fd:3c:60:6b:1d:99:31:5e:f8:78:ff

Fingerprint (SHA-1): 2b:e7:18:42:a2:5b:d9:eb:83:b8:78:97:09:d6:62:60:97:7a:45:36
Fingerprint (SHA-256): 1c:27:8b:16:07:69:96:4f:8d:d7:53:15:c2:e0:9d:8d:3e:58:d7:e2:37:f3:69:12:b5:d4:b6:3e:69:77:6b:e1


Revocation Information


Check the revocation status for certificate Fireware web CA
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for Fireware web CA

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Cert Sign
CRL Sign
Extended Key Usages
None
Extensions
4
CA Certificate
This is a CA certificate
Maximum Path Length: -1

Subject Alternative Names

This X.509 certificate doesn't contain any subject alternative names.

X.509 Certificate

The complete raw X.509 certificate details for Fireware web CA in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum77V20Ys8MoK+h3oUi1
CNVCTvlAGpEBrkqEtipaGMEQwlr5v6URnSQypp7LkB7eiTZ0c7Rt69X8g1DOfVmd
mRAPFKZqoODq3daorlto3BD1KFeMqNUUKRM6MAhEbytMygftw0RGiuZSj5kR0YmL
kvplljBltMRgdbn6dXDz5eDKhRsxVV2wwnjsBft8l1M24f09klyOJ/6ApFnygskq
RClhoMAkIM/44mtmB2WAper+1HPGc26Q2GQJUkq2fO98LZ1Jwbg2y47rta+rTgzm
CndsJTxrzXmfM078tRBHPd+5UwrZZqe2W4S1EO8cCif420GsgOwplSFmHxdCX7j5
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1533050740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WatchGuard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fireware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fireware web CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-01 15:25:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2028-07-28 15:25:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WatchGuard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fireware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fireware web CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23535051890340896562404936338459403267168037354294060135386219411846639976419315197638826739288955910146871733316433840190886111087108358922568911594283618549408279488378672944466398023073236254630465937764572035391534792462266355879144198327817647136687378712017308472406673228151922151161098157131146847479147867277197083704345130330957561285119796257472124466701296462081604955182953633805435532708909982124722696913071011381092132707378357555041584295372774009823016419020079827013062244543605488171885726356600385485556663822825384169903679033214216817284884816798163050254949781676000020866000034163972457953659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (7 bits)
							01a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							244a2d99f7e31be570fd3c606b1d99315ef878ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 244a2d99f7e31be570fd3c606b1d99315ef878ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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