tkdjo6s37m.ct-test.ssl.pub

Issued by TrustAsia DV TLS ECC Test CA G4

About this certificate

This digital certificate with serial number 1e:33:bd:75:1e:43:b4:9c:8a:fa:03:da:e4:98:b1:47:da:54:0a:4c was issued on by TrustAsia Technologies, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Certificate contains invalid key usage(s): KeyUsageKeyEncipherment Key usage values keyEncipherment or dataEncipherment MUST NOT be present in certificates with ECDSA public keys (RFC 8813 Section 3)
  • Certificate had unexpected key usage(s): KeyUsageKeyEncipherment ECDSA end-entity certificates MAY have key usages: digitalSignature, nonRepudiation and keyAgreement (RFC 5480 Section 3)
  • Certificate had 1 embedded SCTs from distinct log IDs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tkdjo6s37m.ct-test.ssl.pub

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:33:bd:75:1e:43:b4:9c:8a:fa:03:da:e4:98:b1:47:da:54:0a:4c
Serial Number (int): 172423565205146666943031575277029305167899789900
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: de:e1:76:0a:2a:21:d5:ba:6f:e6:14:1c:a1:17:bf:2b:66:67:69:5e
AuthorityKeyId: af:84:b5:74:27:70:df:14:a7:2a:cc:3a:5a:dc:f7:3c:04:09:53:9b

Fingerprint (sha1): 79:23:6e:8a:32:57:37:71:0f:c5:73:4e:f2:88:e8:78:af:21:d2:81
Fingerprint (sha256): 00:a4:68:d5:a0:a7:a0:89:44:83:5c:63:89:10:d6:7c:31:77:f6:fe:d0:92:e8:d2:24:db:a2:a3:c9:92:d1:66

Issuing Certificate URL: http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt

Revocation information

OCSP Server: http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4
CRL Distribution Point: http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl

Check the revocation status for certificate tkdjo6s37m.ct-test.ssl.pub

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tkdjo6s37m.ct-test.ssl.pub

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tkdjo6s37m.ct-test.ssl.pub

Other certificates including the domain name ssl.pub

(limited to 100 certificates)
nwgm7ht264.ct-test.ssl.pub
a934sdh4j4.ct-test.ssl.pub
ri9az9hijm.ct-test.ssl.pub
amlhgnocd3.ct-test.ssl.pub
m829wl7p5d.ct-test.ssl.pub
ond6sblfj2.ct-test.ssl.pub
tlmkiah94a.ct-test.ssl.pub
ekyqk1wak9.ct-test.ssl.pub
fogh9b2thr.ct-test.ssl.pub
v04rq6fvj6.ct-test.ssl.pub
gzuv3d2a67.ct-test.ssl.pub
8xsephnzjo.ct-test.ssl.pub
swrjcmax9q.ct-test.ssl.pub
ooooz8jyet.ct-test.ssl.pub
69xqk8uidt.ct-test.ssl.pub
bvbryy3l73.ct-test.ssl.pub
dzikjroicw.ct-test.ssl.pub
i58oryx2mr.ct-test.ssl.pub
i926crjzry.ct-test.ssl.pub
wjcxc27mzf.ct-test.ssl.pub
a5w53s75yj.ct-test.ssl.pub
ztqft2bpd3.ct-test.ssl.pub
9jq1g4pujc.ct-test.ssl.pub
v3ziaxyifi.ct-test.ssl.pub
nhxhkx3tbj.ct-test.ssl.pub
qttpm5nx0a.ct-test.ssl.pub
1rq9tc43mm.ct-test.ssl.pub
m5htli1d5o.ct-test.ssl.pub
h5s4ociz9e.ct-test.ssl.pub
jgjv6buzg4.ct-test.ssl.pub
1v0j3zx2vf.ct-test.ssl.pub
503j1zv5hr.ct-test.ssl.pub
v7cz85o5qu.ct-test.ssl.pub
ikyyp5ewvn.ct-test.ssl.pub
yhfso22bwd.ct-test.ssl.pub
yjmlzz8ntk.ct-test.ssl.pub
z0ycd2cq5o.ct-test.ssl.pub
7mi41vqv4k.ct-test.ssl.pub
4gq3k1imdk.ct-test.ssl.pub
3733twod28.ct-test.ssl.pub
9e2c212u3u.ct-test.ssl.pub
t99j8mtvfu.ct-test.ssl.pub
tvfh7fpu3f.ct-test.ssl.pub
zwp30cd4l1.ct-test.ssl.pub
hq19opvl0s.ct-test.ssl.pub
r1jp33j96s.ct-test.ssl.pub
dz8mceve7z.ct-test.ssl.pub
e5h6xnd7vx.ct-test.ssl.pub
m21943ws1u.ct-test.ssl.pub
owm07o5f1r.ct-test.ssl.pub
84gb394tbe.ct-test.ssl.pub
81c6by4253.ct-test.ssl.pub
n0rdecic43.ct-test.ssl.pub
67eqwiskgl.ct-test.ssl.pub
ysg0gghe75.ct-test.ssl.pub
x7qat1umlw.ct-test.ssl.pub
dgc4yro1kv.ct-test.ssl.pub
46rndhu78m.ct-test.ssl.pub
zjsns8m4j7.ct-test.ssl.pub
l8gj18hjkn.ct-test.ssl.pub
o9ramgsh6t.ct-test.ssl.pub
1kqi789ni2.ct-test.ssl.pub
5agjlvcl7b.ct-test.ssl.pub
b8j8iqk60o.ct-test.ssl.pub
3svv94wl8u.ct-test.ssl.pub
9urr7ufusd.ct-test.ssl.pub
vmq2e3i3ox.ct-test.ssl.pub
dzo513db9e.ct-test.ssl.pub
4a4rrdikop.ct-test.ssl.pub
4a2o33s55z.ct-test.ssl.pub
g56fpx803h.ct-test.ssl.pub
s3wvmaeeci.ct-test.ssl.pub
w9jfm7zzad.ct-test.ssl.pub
7eec1ze861.ct-test.ssl.pub
6nem46p0lx.ct-test.ssl.pub
owmkytn16t.ct-test.ssl.pub
eenlztztxm.ct-test.ssl.pub
sb1caswzk1.ct-test.ssl.pub
p3eack0mid.ct-test.ssl.pub
q5q1cwro4u.ct-test.ssl.pub
q9zy60vwb1.ct-test.ssl.pub
n3tr9mpfoe.ct-test.ssl.pub
tkdjo6s37m.ct-test.ssl.pub
n9l85xl33y.ct-test.ssl.pub
ok11sic48s.ct-test.ssl.pub
7eonmv21yo.ct-test.ssl.pub
jh5qgyn39n.ct-test.ssl.pub
d9xcjr6obk.ct-test.ssl.pub
fe5rh7mdiu.ct-test.ssl.pub
0x04adcu5u.ct-test.ssl.pub
6edtda02xv.ct-test.ssl.pub
uab05zvr92.ct-test.ssl.pub
v7qsz7nguh.ct-test.ssl.pub
snxygo9xfx.ct-test.ssl.pub
yawps77qv1.ct-test.ssl.pub
5scf74gnin.ct-test.ssl.pub
94e4oknikz.ct-test.ssl.pub
cs7gqw42qe.ct-test.ssl.pub
hx0ng2tfjt.ct-test.ssl.pub
mrfycqm938.ct-test.ssl.pub

Certificate

The complete raw certificate details for tkdjo6s37m.ct-test.ssl.pub in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEpDzP5zX7CjquwIYwFNqcoqmZUYl
Q/IUirYvQvpI/+E7RtkyarFUTcaU5PxFvplP3K3xrs/2NrqjheTWXwW06w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 172423565205146666943031575277029305167899789900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia DV TLS ECC Test CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tkdjo6s37m.ct-test.ssl.pub'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041290f33f9cd7ec28eabb0218c0536a728aa665462543f2148ab62f42fa48ffe13b46d9326ab1544dc694e4fc45be994fdcadf1aecff636baa385e4d65f05b4eb
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af84b5742770df14a72acc3a5adcf73c0409539b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkdjo6s37m.ct-test.ssl.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dee1760a2a21d5ba6fe6141ca117bf2b6667695e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 33568002063386065372174009921296208765917661409281153059671780304224957894912676968030739614439222499031711580316465
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664131330125968210021403394132951064829528290371418636790420160603458558334439891428044568303039748763978708300208