y0u0gtbg5a.ct-test.ssl.pub

Issued by TrustAsia DV TLS ECC Test CA G4

About this certificate

This digital certificate with serial number 20:75:6b:3a:6b:a8:f5:31:22:ba:8b:73:f3:07:d2:7a:d7:70:68:bf was issued on by TrustAsia Technologies, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Certificate contains invalid key usage(s): KeyUsageKeyEncipherment Key usage values keyEncipherment or dataEncipherment MUST NOT be present in certificates with ECDSA public keys (RFC 8813 Section 3)
  • Certificate had unexpected key usage(s): KeyUsageKeyEncipherment ECDSA end-entity certificates MAY have key usages: digitalSignature, nonRepudiation and keyAgreement (RFC 5480 Section 3)
  • Certificate had 1 embedded SCTs from distinct log IDs. Browser policy may require 2 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=y0u0gtbg5a.ct-test.ssl.pub

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 20:75:6b:3a:6b:a8:f5:31:22:ba:8b:73:f3:07:d2:7a:d7:70:68:bf
Serial Number (int): 185306232748667601948343069145119063605637048511
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: b0:41:01:3e:73:23:e4:19:c7:5c:2d:24:7c:f0:04:aa:0a:12:ab:38
AuthorityKeyId: af:84:b5:74:27:70:df:14:a7:2a:cc:3a:5a:dc:f7:3c:04:09:53:9b

Fingerprint (sha1): 34:b0:45:e0:b2:9b:b0:fe:8c:99:83:c9:c8:2a:d1:56:57:2d:8d:c8
Fingerprint (sha256): 01:51:95:d3:dc:8e:03:dc:71:47:67:09:ee:34:96:09:75:a9:67:a3:bd:7d:2b:9c:a6:3c:a9:81:19:01:d0:d8

Issuing Certificate URL: http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt

Revocation information

OCSP Server: http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4
CRL Distribution Point: http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl

Check the revocation status for certificate y0u0gtbg5a.ct-test.ssl.pub

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for y0u0gtbg5a.ct-test.ssl.pub

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

y0u0gtbg5a.ct-test.ssl.pub

Other certificates including the domain name ssl.pub

(limited to 100 certificates)
nwgm7ht264.ct-test.ssl.pub
a934sdh4j4.ct-test.ssl.pub
ri9az9hijm.ct-test.ssl.pub
amlhgnocd3.ct-test.ssl.pub
m829wl7p5d.ct-test.ssl.pub
ond6sblfj2.ct-test.ssl.pub
tlmkiah94a.ct-test.ssl.pub
ekyqk1wak9.ct-test.ssl.pub
fogh9b2thr.ct-test.ssl.pub
v04rq6fvj6.ct-test.ssl.pub
gzuv3d2a67.ct-test.ssl.pub
8xsephnzjo.ct-test.ssl.pub
swrjcmax9q.ct-test.ssl.pub
ooooz8jyet.ct-test.ssl.pub
69xqk8uidt.ct-test.ssl.pub
bvbryy3l73.ct-test.ssl.pub
dzikjroicw.ct-test.ssl.pub
i58oryx2mr.ct-test.ssl.pub
i926crjzry.ct-test.ssl.pub
wjcxc27mzf.ct-test.ssl.pub
a5w53s75yj.ct-test.ssl.pub
ztqft2bpd3.ct-test.ssl.pub
9jq1g4pujc.ct-test.ssl.pub
v3ziaxyifi.ct-test.ssl.pub
nhxhkx3tbj.ct-test.ssl.pub
qttpm5nx0a.ct-test.ssl.pub
1rq9tc43mm.ct-test.ssl.pub
m5htli1d5o.ct-test.ssl.pub
h5s4ociz9e.ct-test.ssl.pub
jgjv6buzg4.ct-test.ssl.pub
1v0j3zx2vf.ct-test.ssl.pub
503j1zv5hr.ct-test.ssl.pub
v7cz85o5qu.ct-test.ssl.pub
ikyyp5ewvn.ct-test.ssl.pub
yhfso22bwd.ct-test.ssl.pub
yjmlzz8ntk.ct-test.ssl.pub
z0ycd2cq5o.ct-test.ssl.pub
7mi41vqv4k.ct-test.ssl.pub
4gq3k1imdk.ct-test.ssl.pub
3733twod28.ct-test.ssl.pub
9e2c212u3u.ct-test.ssl.pub
t99j8mtvfu.ct-test.ssl.pub
tvfh7fpu3f.ct-test.ssl.pub
zwp30cd4l1.ct-test.ssl.pub
hq19opvl0s.ct-test.ssl.pub
r1jp33j96s.ct-test.ssl.pub
dz8mceve7z.ct-test.ssl.pub
e5h6xnd7vx.ct-test.ssl.pub
m21943ws1u.ct-test.ssl.pub
owm07o5f1r.ct-test.ssl.pub
84gb394tbe.ct-test.ssl.pub
81c6by4253.ct-test.ssl.pub
n0rdecic43.ct-test.ssl.pub
67eqwiskgl.ct-test.ssl.pub
ysg0gghe75.ct-test.ssl.pub
x7qat1umlw.ct-test.ssl.pub
dgc4yro1kv.ct-test.ssl.pub
46rndhu78m.ct-test.ssl.pub
zjsns8m4j7.ct-test.ssl.pub
l8gj18hjkn.ct-test.ssl.pub
o9ramgsh6t.ct-test.ssl.pub
1kqi789ni2.ct-test.ssl.pub
5agjlvcl7b.ct-test.ssl.pub
b8j8iqk60o.ct-test.ssl.pub
3svv94wl8u.ct-test.ssl.pub
9urr7ufusd.ct-test.ssl.pub
vmq2e3i3ox.ct-test.ssl.pub
dzo513db9e.ct-test.ssl.pub
4a4rrdikop.ct-test.ssl.pub
4a2o33s55z.ct-test.ssl.pub
g56fpx803h.ct-test.ssl.pub
s3wvmaeeci.ct-test.ssl.pub
w9jfm7zzad.ct-test.ssl.pub
7eec1ze861.ct-test.ssl.pub
6nem46p0lx.ct-test.ssl.pub
owmkytn16t.ct-test.ssl.pub
eenlztztxm.ct-test.ssl.pub
sb1caswzk1.ct-test.ssl.pub
p3eack0mid.ct-test.ssl.pub
q5q1cwro4u.ct-test.ssl.pub
q9zy60vwb1.ct-test.ssl.pub
n3tr9mpfoe.ct-test.ssl.pub
tkdjo6s37m.ct-test.ssl.pub
n9l85xl33y.ct-test.ssl.pub
ok11sic48s.ct-test.ssl.pub
7eonmv21yo.ct-test.ssl.pub
jh5qgyn39n.ct-test.ssl.pub
d9xcjr6obk.ct-test.ssl.pub
fe5rh7mdiu.ct-test.ssl.pub
0x04adcu5u.ct-test.ssl.pub
6edtda02xv.ct-test.ssl.pub
uab05zvr92.ct-test.ssl.pub
v7qsz7nguh.ct-test.ssl.pub
snxygo9xfx.ct-test.ssl.pub
yawps77qv1.ct-test.ssl.pub
5scf74gnin.ct-test.ssl.pub
94e4oknikz.ct-test.ssl.pub
cs7gqw42qe.ct-test.ssl.pub
hx0ng2tfjt.ct-test.ssl.pub
mrfycqm938.ct-test.ssl.pub

Certificate

The complete raw certificate details for y0u0gtbg5a.ct-test.ssl.pub in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEubUUYpl6BfQmbgLPnVSTdnL9qFze
0K2oR0e322uKsjl2Ore5UJJoFclUw+dTsVHZx8PsAO5+Am/8UM2gr1WG1Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185306232748667601948343069145119063605637048511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TrustAsia DV TLS ECC Test CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'y0u0gtbg5a.ct-test.ssl.pub'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b9b51462997a05f4266e02cf9d54937672fda85cded0ada84747b7db6b8ab239763ab7b950926815c954c3e753b151d9c7c3ec00ee7e026ffc50cda0af5586d5
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName af84b5742770df14a72acc3a5adcf73c0409539b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y0u0gtbg5a.ct-test.ssl.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.wt-test.trustasia.com/TrustAsiaDVTLSECCTestCAG4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b041013e7323e419c75c2d247cf004aa0a12ab38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19294736215379729448807599253028726578300393221707223979488730943805905459892474857162771766828836686283508631018071
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18487903822226996381232228415569436486791703845652102777512709020714924659536453916199853053673352974088863729582796