qrt6.securemail.hinet.net

- 中華電信股份有限公司 -

Issued by

About this certificate

This digital certificate with serial number 49:61:52:8f:75:be:8b:9e:d1:a7:c7:26:dc:4d:ff:78 was issued on by Chunghwa Telecom Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

中華電信股份有限公司

Organization: 中華電信股份有限公司
Country: TW

Chunghwa Telecom Co., Ltd.

Organization: Chunghwa Telecom Co., Ltd.
Organization unit: Public Certification Authority
Country: TW

This certificate has expire since

Certificate Details

Serial Number (hex): 49:61:52:8f:75:be:8b:9e:d1:a7:c7:26:dc:4d:ff:78
Serial Number (int): 97538971011231577372178510651333672824
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: aa:f8:7c:d1:65:90:22:0e:1e:9a:e1:47:51:7e:d8:47:29:9f:6f:9e
AuthorityKeyId: 71:b3:50:31:a0:1b:5b:7b:b2:a6:59:7c:fd:10:8c:3c:ad:3a:3d:7a

Fingerprint (sha1): 06:4d:7e:c4:b6:43:14:ff:f5:d9:e8:d3:be:c8:30:2c:6b:83:42:79
Fingerprint (sha256): 03:89:fd:89:27:ed:f2:f5:9b:e9:71:97:b1:ba:ad:de:80:1d:f2:08:f2:5e:ca:48:99:c7:83:10:8d:36:f9:14

Issuing Certificate URL: http://repository.publicca.hinet.net/certs/IssuedToThisCA.p7b

Revocation information

OCSP Server: http://ocsp.publicca.hinet.net/OCSP/ocsp
CRL Distribution Point: http://repository.publicca.hinet.net/crl/1000-1/complete.crl
CRL Distribution Point: http://repository.publicca.hinet.net/crl/PubCA/complete.crl

Check the revocation status for certificate qrt6.securemail.hinet.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qrt6.securemail.hinet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qrt6.securemail.hinet.net

Other certificates including the domain name hinet.net

(limited to 100 certificates)
223-200-181-79.hinet-ip.hinet.net
36-236-212-230.dynamic.hinet.net
*.myweb.hinet.net
ms1.hinet.net
*.talk.hinet.net
testsafebrowsing.hinet.net
antithreat.soc365.hinet.net
hisecure.hinet.net
api.cf.dsp.hinet.net
36-236-152-64.dynamic.hinet.net
122-116-221-73.hinet-ip.hinet.net
iview.hivideo.hinet.net
a4sign.hinet.net
hikey.hinet.net
149-129-120-168.hinet-ip.hinet.net
www.adm.kod.hinet.net
36-236-188-184.dynamic.hinet.net
qrt6.securemail.hinet.net
*.hinet.net
s5.wpc.edgecastcdn.net
*.owastage.cloudbox.hinet.net
36-236-219-58.dynamic-ip.hinet.net
36-236-197-76.dynamic-ip.hinet.net
1-172-68-179.dynamic-ip.hinet.net
1-171-172-241.dynamic.hinet.net
test.stbs.hinet.net
ottapi2test.media.hinet.net
itri-iod.hicloud.hinet.net
ra.testev.hinet.net
*.hinet.net
*.webmail.hinet.net
*.userportal.hicloud.hinet.net
aaaview.hinet.net
good.epkig2ov.hinet.net
*.idc.hinet.net
hipay.hinet.net
s5.wpc.edgecastcdn.net
emcrm.hinet.net
feeds.cms.hinet.net
mail.colocation.hinet.net
sdc.hivideo.hinet.net
ott.hinet.net
*.biz-mail.hinet.net
s5.wpc.edgecastcdn.net
web.sms.hinet.net
sdc.hivideo.hinet.net
*.hinetfax.hinet.net
152-89-171-68.hinet-ip.hinet.net
hiwinner.hinet.net
149-129-120-168.hinet-ip.hinet.net
testea.hinet.net
220-132-94-72.hinet-ip.hinet.net
eshopmanager.hiwinner.hinet.net
trafficinfo.hinet.net
parent.hinet.net
*.quarantine.hinet.net
sng.hinet.net
skylens.hinet.net
ips.soc365.hinet.net
111-250-219-61.dynamic-ip.hinet.net
dn.hinet.net
*.himail.hinet.net
cek.learn.hinet.net
125-227-156-103.hinet-ip.hinet.net
secure365.hinet.net
village.hinet.net
*.ivs.hinet.net
ttt-aq.ioc.hinet.net
ev.hinet.net
times.hinet.net
fttb.hinet.net
220-134-204-148.hinet-ip.hinet.net
skylens.hinet.net
hib2border.hinet.net
36-236-221-198.dynamic-ip.hinet.net
1-34-234-161.hinet-ip.hinet.net
47-240-109-87.hinet-ip.hinet.net
61-216-36-84.hinet-ip.hinet.net
aaaapi.hinet.net
tls.hinet.net
pki.hinet.net;;eca.hinet.net;;epki.com.tw
*.aay.hinet.net
s5.wpc.edgecastcdn.net
member2.hinet.net
test.hiott.hinet.net
highwaybus.hinet.net
feeds.hifree.hinet.net
36-236-195-92.dynamic-ip.hinet.net
36-236-197-144.dynamic-ip.hinet.net
hievent.hinet.net
aaaservice.hinet.net
village.hinet.net
multipay.hinet.net
alltaipeiland.hinet.net
36-236-179-228.dynamic.hinet.net
WLANAC.HINET.NET
36-236-174-50.dynamic-ip.hinet.net
cars.hinet.net
soc365.hinet.net
testriskeye.hinet.net

Certificate

The complete raw certificate details for qrt6.securemail.hinet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux7QcBp6xtqkk9qOvI8d
UbJkwHm2WWPwRCL2DGjH+YmD4FGkSwHdcyFRfQ7FrONHOe5Xikyj+gRG0fpek1sD
uIL5LmGgZcpYJn/4X8NqrySH9NqW7lggMTxpUlK0GxRV9GzUW55Rvb6PlUuO/OkS
XnqmBaySaeOK91gQZQVJIPV3JWCxHeudiG1tdDUx/bnU6RajM5nPJ/Oy30Bcx7+k
l0ZEnZz5grrh7LAMeRyaKvFBPG9/X0YWKfkOHXRNQDg2lDFZOcaBg2lIW71RulXt
pdkCSu5MLTjQ5erqHjSyzHkBigbbkAA9EHIqnQfK8lKfY2Q2H5n3IC0XBdloffQC
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97538971011231577372178510651333672824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chunghwa Telecom Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Public Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-20 04:03:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-20 04:03:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中華電信股份有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qrt6.securemail.hinet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23621758082208822481577257276462406509747808820326199375854276760758920727860373135200385028513624891150978226298083595166678621509401176745132030984167956417222906633125421121984643162936389790108748852930308621180745713310634868238788443109971020723824808286278937296164078122993235614210169858600071863777016501314856037224059308088694299021220718412790638160458627512453150208735116237849158872233578272823460867873183506335156898413434089359818638942117179965649755383796203264752501131059976290139331462155239822109060805552732496452000967610984312151062204947059303189654187722834507214605544695507870293426831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/certs/IssuedToThisCA.p7b'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.publicca.hinet.net/OCSP/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.886.1.100.0.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 71b35031a01b5b7bb2a6597cfd108c3cad3a3d7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/crl/1000-1/complete.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/crl/PubCA/complete.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrt6.securemail.hinet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaf87cd16590220e1e9ae147517ed847299f6f9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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