8xsephnzjo.ct-test.ssl.pub

Issued by TrustAsia DV TLS ECC Test CA G4

About this certificate

This digital certificate with serial number 73:12:fb:e9:2a:db:03:aa:17:24:ab:b0:d8:c4:8b:40:b7:3c:5c:ce was issued on by TrustAsia Technologies, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Certificate contains invalid key usage(s): KeyUsageKeyEncipherment Key usage values keyEncipherment or dataEncipherment MUST NOT be present in certificates with ECDSA public keys (RFC 8813 Section 3)
  • Certificate had unexpected key usage(s): KeyUsageKeyEncipherment ECDSA end-entity certificates MAY have key usages: digitalSignature, nonRepudiation and keyAgreement (RFC 5480 Section 3)
  • Certificate had 1 embedded SCTs from distinct log IDs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=8xsephnzjo.ct-test.ssl.pub

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 73:12:fb:e9:2a:db:03:aa:17:24:ab:b0:d8:c4:8b:40:b7:3c:5c:ce
Serial Number (int): 656957296584840224062093998075603191946326858958
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 13:4c:62:f9:72:5c:ff:94:a0:e5:ba:e6:df:e8:e2:ee:ea:dd:dd:76
AuthorityKeyId: af:84:b5:74:27:70:df:14:a7:2a:cc:3a:5a:dc:f7:3c:04:09:53:9b

Fingerprint (sha1): e1:7e:f8:d3:c4:53:70:2b:6e:70:21:dc:08:75:ce:4f:8e:05:bc:46
Fingerprint (sha256): 00:18:62:5b:5c:c1:c2:85:34:d9:4d:66:d6:86:66:e4:e1:3d:e9:0a:ea:0c:aa:c2:20:9b:52:73:f2:51:a4:e7

Issuing Certificate URL: http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt

Revocation information

OCSP Server: http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4
CRL Distribution Point: http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl

Check the revocation status for certificate 8xsephnzjo.ct-test.ssl.pub

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 8xsephnzjo.ct-test.ssl.pub

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

8xsephnzjo.ct-test.ssl.pub

Other certificates including the domain name ssl.pub

(limited to 100 certificates)
nwgm7ht264.ct-test.ssl.pub
a934sdh4j4.ct-test.ssl.pub
901qof6ost.ct-test.ssl.pub
ri9az9hijm.ct-test.ssl.pub
j2on3yvxsn.ct-test.ssl.pub
amlhgnocd3.ct-test.ssl.pub
m829wl7p5d.ct-test.ssl.pub
ond6sblfj2.ct-test.ssl.pub
tlmkiah94a.ct-test.ssl.pub
ekyqk1wak9.ct-test.ssl.pub
fogh9b2thr.ct-test.ssl.pub
v04rq6fvj6.ct-test.ssl.pub
gzuv3d2a67.ct-test.ssl.pub
8xsephnzjo.ct-test.ssl.pub
swrjcmax9q.ct-test.ssl.pub
ooooz8jyet.ct-test.ssl.pub
69xqk8uidt.ct-test.ssl.pub
bvbryy3l73.ct-test.ssl.pub
dzikjroicw.ct-test.ssl.pub
i58oryx2mr.ct-test.ssl.pub
i926crjzry.ct-test.ssl.pub
wjcxc27mzf.ct-test.ssl.pub
a5w53s75yj.ct-test.ssl.pub
ztqft2bpd3.ct-test.ssl.pub
9jq1g4pujc.ct-test.ssl.pub
mxnujzw9q2.ct-test.ssl.pub
v3ziaxyifi.ct-test.ssl.pub
nhxhkx3tbj.ct-test.ssl.pub
qttpm5nx0a.ct-test.ssl.pub
1rq9tc43mm.ct-test.ssl.pub
m5htli1d5o.ct-test.ssl.pub
h5s4ociz9e.ct-test.ssl.pub
jgjv6buzg4.ct-test.ssl.pub
1v0j3zx2vf.ct-test.ssl.pub
503j1zv5hr.ct-test.ssl.pub
v7cz85o5qu.ct-test.ssl.pub
ikyyp5ewvn.ct-test.ssl.pub
yhfso22bwd.ct-test.ssl.pub
yjmlzz8ntk.ct-test.ssl.pub
z0ycd2cq5o.ct-test.ssl.pub
7mi41vqv4k.ct-test.ssl.pub
x32wd53vsr.ct-test.ssl.pub
4gq3k1imdk.ct-test.ssl.pub
3733twod28.ct-test.ssl.pub
9e2c212u3u.ct-test.ssl.pub
t99j8mtvfu.ct-test.ssl.pub
tvfh7fpu3f.ct-test.ssl.pub
zwp30cd4l1.ct-test.ssl.pub
hq19opvl0s.ct-test.ssl.pub
r1jp33j96s.ct-test.ssl.pub
dz8mceve7z.ct-test.ssl.pub
e5h6xnd7vx.ct-test.ssl.pub
m21943ws1u.ct-test.ssl.pub
85qp25855b.ct-test.ssl.pub
owm07o5f1r.ct-test.ssl.pub
84gb394tbe.ct-test.ssl.pub
81c6by4253.ct-test.ssl.pub
n0rdecic43.ct-test.ssl.pub
67eqwiskgl.ct-test.ssl.pub
ysg0gghe75.ct-test.ssl.pub
x7qat1umlw.ct-test.ssl.pub
dgc4yro1kv.ct-test.ssl.pub
46rndhu78m.ct-test.ssl.pub
zjsns8m4j7.ct-test.ssl.pub
l8gj18hjkn.ct-test.ssl.pub
o9ramgsh6t.ct-test.ssl.pub
1kqi789ni2.ct-test.ssl.pub
5agjlvcl7b.ct-test.ssl.pub
b8j8iqk60o.ct-test.ssl.pub
3svv94wl8u.ct-test.ssl.pub
9urr7ufusd.ct-test.ssl.pub
vmq2e3i3ox.ct-test.ssl.pub
fhu3qs3fzv.ct-test.ssl.pub
dzo513db9e.ct-test.ssl.pub
8s1mp8vpu5.ct-test.ssl.pub
4a4rrdikop.ct-test.ssl.pub
4a2o33s55z.ct-test.ssl.pub
g56fpx803h.ct-test.ssl.pub
s3wvmaeeci.ct-test.ssl.pub
w9jfm7zzad.ct-test.ssl.pub
7eec1ze861.ct-test.ssl.pub
z1q2gfsb23.ct-test.ssl.pub
6nem46p0lx.ct-test.ssl.pub
owmkytn16t.ct-test.ssl.pub
eenlztztxm.ct-test.ssl.pub
sb1caswzk1.ct-test.ssl.pub
p3eack0mid.ct-test.ssl.pub
v56eotbmlv.ct-test.ssl.pub
q5q1cwro4u.ct-test.ssl.pub
q9zy60vwb1.ct-test.ssl.pub
n3tr9mpfoe.ct-test.ssl.pub
tkdjo6s37m.ct-test.ssl.pub
n9l85xl33y.ct-test.ssl.pub
ok11sic48s.ct-test.ssl.pub
7eonmv21yo.ct-test.ssl.pub
jh5qgyn39n.ct-test.ssl.pub
d9xcjr6obk.ct-test.ssl.pub
fe5rh7mdiu.ct-test.ssl.pub
0x04adcu5u.ct-test.ssl.pub
6edtda02xv.ct-test.ssl.pub

Certificate

The complete raw certificate details for 8xsephnzjo.ct-test.ssl.pub in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAER2G3LSdcpZV+xoCESENqhtSEMuVD
1ebqKJI1JrurG9DgLpB3XchDLVZp6GcN3JOwdjML4XFHqgDRhB0I7G1M2w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 656957296584840224062093998075603191946326858958
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia DV TLS ECC Test CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '8xsephnzjo.ct-test.ssl.pub'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044761b72d275ca5957ec6808448436a86d48432e543d5e6ea28923526bbab1bd0e02e90775dc8432d5669e8670ddc93b076330be17147aa00d1841d08ec6d4cdb
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af84b5742770df14a72acc3a5adcf73c0409539b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8xsephnzjo.ct-test.ssl.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134c62f9725cff94a0e5bae6dfe8e2eeeadddd76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29794651945205459221691415910038069097164506845039333729913754976957667087758837379512205361693587503273752540084974
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18970571343779718183619945652067569527873661501645962875056045826130403126018085384189245072415103691022108349168835