q60b3nertc.ct-test.ssl.pub

Issued by TrustAsia DV TLS ECC Test CA G4

About this certificate

This digital certificate with serial number 12:95:66:8a:73:e9:ca:1e:35:f5:36:3b:b7:d7:c0:64:b4:47:2e:74 was issued on by TrustAsia Technologies, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Certificate had 1 embedded SCTs from distinct log IDs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=q60b3nertc.ct-test.ssl.pub

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 12:95:66:8a:73:e9:ca:1e:35:f5:36:3b:b7:d7:c0:64:b4:47:2e:74
Serial Number (int): 106093577475616973042539227148906638795134676596
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 68:6e:a9:7d:80:a2:43:d7:3d:f4:40:c0:a9:c3:ae:cb:dc:f3:3e:46
AuthorityKeyId: af:84:b5:74:27:70:df:14:a7:2a:cc:3a:5a:dc:f7:3c:04:09:53:9b

Fingerprint (sha1): 4c:6f:24:af:cb:ee:b6:81:25:12:f5:f4:b5:9d:8e:13:77:7e:58:b0
Fingerprint (sha256): 01:1b:c4:e7:d2:9e:97:42:33:ef:51:75:b2:44:74:9e:c9:2e:37:aa:64:e5:2d:87:4e:75:40:a9:cd:19:dd:55

Issuing Certificate URL: http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt

Revocation information

OCSP Server: http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4
CRL Distribution Point: http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl

Check the revocation status for certificate q60b3nertc.ct-test.ssl.pub

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q60b3nertc.ct-test.ssl.pub

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q60b3nertc.ct-test.ssl.pub

Other certificates including the domain name ssl.pub

(limited to 100 certificates)
nwgm7ht264.ct-test.ssl.pub
a934sdh4j4.ct-test.ssl.pub
ri9az9hijm.ct-test.ssl.pub
amlhgnocd3.ct-test.ssl.pub
m829wl7p5d.ct-test.ssl.pub
ond6sblfj2.ct-test.ssl.pub
tlmkiah94a.ct-test.ssl.pub
ekyqk1wak9.ct-test.ssl.pub
fogh9b2thr.ct-test.ssl.pub
v04rq6fvj6.ct-test.ssl.pub
gzuv3d2a67.ct-test.ssl.pub
8xsephnzjo.ct-test.ssl.pub
swrjcmax9q.ct-test.ssl.pub
ooooz8jyet.ct-test.ssl.pub
69xqk8uidt.ct-test.ssl.pub
bvbryy3l73.ct-test.ssl.pub
dzikjroicw.ct-test.ssl.pub
i58oryx2mr.ct-test.ssl.pub
i926crjzry.ct-test.ssl.pub
wjcxc27mzf.ct-test.ssl.pub
a5w53s75yj.ct-test.ssl.pub
ztqft2bpd3.ct-test.ssl.pub
9jq1g4pujc.ct-test.ssl.pub
v3ziaxyifi.ct-test.ssl.pub
nhxhkx3tbj.ct-test.ssl.pub
qttpm5nx0a.ct-test.ssl.pub
1rq9tc43mm.ct-test.ssl.pub
m5htli1d5o.ct-test.ssl.pub
h5s4ociz9e.ct-test.ssl.pub
jgjv6buzg4.ct-test.ssl.pub
1v0j3zx2vf.ct-test.ssl.pub
503j1zv5hr.ct-test.ssl.pub
v7cz85o5qu.ct-test.ssl.pub
ikyyp5ewvn.ct-test.ssl.pub
yhfso22bwd.ct-test.ssl.pub
yjmlzz8ntk.ct-test.ssl.pub
z0ycd2cq5o.ct-test.ssl.pub
7mi41vqv4k.ct-test.ssl.pub
4gq3k1imdk.ct-test.ssl.pub
3733twod28.ct-test.ssl.pub
9e2c212u3u.ct-test.ssl.pub
t99j8mtvfu.ct-test.ssl.pub
tvfh7fpu3f.ct-test.ssl.pub
zwp30cd4l1.ct-test.ssl.pub
hq19opvl0s.ct-test.ssl.pub
r1jp33j96s.ct-test.ssl.pub
dz8mceve7z.ct-test.ssl.pub
e5h6xnd7vx.ct-test.ssl.pub
m21943ws1u.ct-test.ssl.pub
owm07o5f1r.ct-test.ssl.pub
84gb394tbe.ct-test.ssl.pub
81c6by4253.ct-test.ssl.pub
n0rdecic43.ct-test.ssl.pub
67eqwiskgl.ct-test.ssl.pub
ysg0gghe75.ct-test.ssl.pub
x7qat1umlw.ct-test.ssl.pub
dgc4yro1kv.ct-test.ssl.pub
46rndhu78m.ct-test.ssl.pub
zjsns8m4j7.ct-test.ssl.pub
l8gj18hjkn.ct-test.ssl.pub
o9ramgsh6t.ct-test.ssl.pub
1kqi789ni2.ct-test.ssl.pub
5agjlvcl7b.ct-test.ssl.pub
b8j8iqk60o.ct-test.ssl.pub
3svv94wl8u.ct-test.ssl.pub
9urr7ufusd.ct-test.ssl.pub
vmq2e3i3ox.ct-test.ssl.pub
dzo513db9e.ct-test.ssl.pub
4a4rrdikop.ct-test.ssl.pub
4a2o33s55z.ct-test.ssl.pub
g56fpx803h.ct-test.ssl.pub
s3wvmaeeci.ct-test.ssl.pub
w9jfm7zzad.ct-test.ssl.pub
7eec1ze861.ct-test.ssl.pub
6nem46p0lx.ct-test.ssl.pub
owmkytn16t.ct-test.ssl.pub
eenlztztxm.ct-test.ssl.pub
sb1caswzk1.ct-test.ssl.pub
p3eack0mid.ct-test.ssl.pub
q5q1cwro4u.ct-test.ssl.pub
q9zy60vwb1.ct-test.ssl.pub
n3tr9mpfoe.ct-test.ssl.pub
tkdjo6s37m.ct-test.ssl.pub
n9l85xl33y.ct-test.ssl.pub
ok11sic48s.ct-test.ssl.pub
7eonmv21yo.ct-test.ssl.pub
jh5qgyn39n.ct-test.ssl.pub
d9xcjr6obk.ct-test.ssl.pub
fe5rh7mdiu.ct-test.ssl.pub
0x04adcu5u.ct-test.ssl.pub
6edtda02xv.ct-test.ssl.pub
uab05zvr92.ct-test.ssl.pub
v7qsz7nguh.ct-test.ssl.pub
snxygo9xfx.ct-test.ssl.pub
yawps77qv1.ct-test.ssl.pub
5scf74gnin.ct-test.ssl.pub
94e4oknikz.ct-test.ssl.pub
cs7gqw42qe.ct-test.ssl.pub
hx0ng2tfjt.ct-test.ssl.pub
mrfycqm938.ct-test.ssl.pub

Certificate

The complete raw certificate details for q60b3nertc.ct-test.ssl.pub in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4GU7SuL/2JPb49PSAwhyRibyGRwZ
Kqw/Q2Guwa66Rb7b8BXs7T/03S4m9ifzDTF/vzPSYa1fsk257j/iKgl/Hw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106093577475616973042539227148906638795134676596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia DV TLS ECC Test CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'q60b3nertc.ct-test.ssl.pub'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e0653b4ae2ffd893dbe3d3d20308724626f2191c192aac3f4361aec1aeba45bedbf015eced3ff4dd2e26f627f30d317fbf33d261ad5fb24db9ee3fe22a097f1f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af84b5742770df14a72acc3a5adcf73c0409539b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q60b3nertc.ct-test.ssl.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							686ea97d80a243d73df440c0a9c3aecbdcf33e46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18280540764045014812499441045122429264130416553884755829934294368617557751516590500044598790825358072614104792858377
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5867395245145408571808244065795319890902412856621757652790373720531328240838785758988493694620518148516988753102951