Certificate for pndh.org

Certificate is witin its validity period

Issued by itself (self-signed)

About the pndh.org Certificate

This certificate with serial number 7f:5d:70:10:22:09:ba:ff:f9:06:87:ef:f4:d0:6b:29:59:80:03:7a for pndh.org was issued on by itself (self-signed).

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this Certificate review for pndh.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Basic Constraints extension is marked as non-critical basicConstraints MUST appear as a critical extension (RFC 5280: 4.2.1.9)
  • Root and Subordinate CA certificates MUST have a countryName present in subject information (BRs: 7.1.2.1)
  • Root and Subordinate CA certificate keyUsage extension MUST be present (BRs: 7.1.2.1, RFC 5280: 4.2.1.3)
  • Root and Subordinate CA certificates MUST have a organizationName present in subject information (BRs: 7.1.2.1)
  • CAs MUST NOT issue certificates that have authority key IDs that include both the key ID and the issuer's issuer name and serial number (Mozilla Root Store Policy / Section 5.2)
  • Root CA certificates MUST have Key Usage Extension Present (BRs: 7.1.2.1)

pndh.org

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 7f:5d:70:10:22:09:ba:ff:f9:06:87:ef:f4:d0:6b:29:59:80:03:7a
Serial Number (int): 727125559263877470749263267992249332999837975418
Serial Number Length: 159 bits, 20 octets

Subject Key Identifier: fe:88:16:f4:30:02:48:f2:40:56:56:6e:c5:c2:76:a0:93:bb:b3:c4
Authority Key Identifier: fe:88:16:f4:30:02:48:f2:40:56:56:6e:c5:c2:76:a0:93:bb:b3:c4

Fingerprint (SHA-1): f1:9e:22:d4:49:16:c9:87:5d:bf:9a:a0:ba:93:fb:ca:ba:e1:03:ae
Fingerprint (SHA-256): d2:57:d1:44:be:72:c2:66:0c:95:bd:e1:a2:54:f0:72:0b:d7:d2:ae:2d:2f:bf:76:ff:b5:19:fd:2e:61:95:fc


Revocation Information


Check the revocation status for certificate pndh.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pndh.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
None
Extended Key Usages
None
Extensions
4
CA Certificate
This is a CA certificate
Maximum Path Length: -1

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for pndh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/CMSgW25zoZLxSpN6AOR
88ttZEMQoHXqCgo/I74UP0xBY0nkLnUWQGA2MoBajkt99pd5o31xjiEaRctKWjAc
4FipePuCaVbVBKckOvyFw53YVEzAPRekQOaKfI9nFMaaRmSb258woEfM9UC7g5lz
uuo47zQs7UMusbXZUg0Xecwp5XQQqY6th56YduSv+SRqOCQ19Pzzw2u3ze3REs8t
SsI6vSNVr1L60WJwHsc4AMsEhOefvd+fNNGLo5/U/DM9b3GgzQuEbZPaMdXdACTu
1742gPQiuikJN3JFd0N8We21vwMLRb97GXMzZNNnZUGsKuvXKdt0tQUNFk5OxPXd
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 727125559263877470749263267992249332999837975418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pndh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 20:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2032-10-10 20:45:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pndh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31829347640961158463068487451751975623282963979002573277052339939480168078843738368988388584277469182042358837960422086554670685552901711752113216251513804478247747969672543829043396718909148841074108568753666493718377188910915213021562380280741583703769174508220212903342589140399711024423077827041707025660408185521392744891893003784994340083140914098140762452579804316310237710871146518172085636520124353309987148976949854028750994492643224613763861468535651460266257994315997786763793439371623290702695743895533903118516803265539125990595519240815530197380683139698140726630446813004268527993487396221979362450869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe8816f4300248f24056566ec5c276a093bbb3c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe8816f4300248f24056566ec5c276a093bbb3c4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pndh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String ']p"	�������k)Y�z'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pndh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pndh.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094e3ff36f7a2c64d549b39244c49f5b2b7699d194a9059af2fd2c0748c75b96ef73b0f117d3834ea450ad237a7aee1434302ed3409f4c6953de06acb87697abe207ae4dfe30e38d6e28dd81a3612404ea15c45d23a6dce919d8c27637136f57b43f6898c5200f6f785533c2f6e7a28fa316e9945fc778b98d37a8ba3621d4446c477992d519adb861f4c0b7ab7ba45f542b722dcfb2362caeb125c332ac81d5040f2c4c35716e3005059a27484bee703e498f97e1907a08be52a7d87a9d7e147c6757130b7075976e040bde05a6a4c5c8fd1a0bfa15be114df11253c0b7ebbaa306effc238a3f19c817b1a725bfcaf9694b61bac0fb7871aa4f4a40ede50dc50