AffirmTrust Validation Authority

- AffirmTrust -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 10:7c:f8:08:9e:d0:88:3d:63:9a:9c:39:bb:d8:d8:a9 was issued on by AffirmTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

AffirmTrust

Organization: AffirmTrust
Country: CA

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate will expire on

Certificate Details

Serial Number (hex): 10:7c:f8:08:9e:d0:88:3d:63:9a:9c:39:bb:d8:d8:a9
Serial Number (int): 21916523463574709817301177398812268713
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 78:a6:ff:f0:f8:50:75:1f:f3:be:c9:0c:61:86:ee:24:c8:a8:5c:55
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 63:a4:25:a4:ea:80:8f:b8:27:76:f5:98:1c:83:bb:79:47:60:1d:22
Fingerprint (sha256): 06:0d:0a:e5:e0:af:e2:d6:1f:59:a0:34:d8:f7:9a:ed:5e:6b:89:78:a4:b3:92:66:21:0f:60:28:1d:11:aa:33


Revocation information


Check the revocation status for certificate AffirmTrust Validation Authority

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AffirmTrust Validation Authority

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

OCSP Signing

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for AffirmTrust Validation Authority in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38AVz+qf+RswQrvAUnXW
tkVa6Iksxo6e7o+q62+vCqai0HD5hJHDN5xQHKpIL5hoz3s/MlhLq6xHNwfQDX13
jCQRD2OPtz3dGhw/LuExiAoA/eNSq8PdWwQriXfzaAIa8p9iK2O4rnj8qQxsji8H
reUWpif0Y6LpJfbiFx5/ZAl6XVj0D1Ygx2fwXCAqLVx6xYwTPMu26krzPwqTHMg1
LWX8DxKJC1Q/LL1nYFkSpVtLsxHWUZ/3+up1FBftaYWFp800N6/7+2H2ITsw3rZU
3B38TFgZWFUwmbB4Qka6n+4e3HE8radl+xnvr+UbcAL8c6pwdgRcS0bJhKmI3G2x
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21916523463574709817301177398812268713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 15:48:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-27 15:48:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Validation Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28245862751717344807911513434966785095677283317686704789398519276684585392832660820794046135234491785528357366763551169277462375673737013255485180119688869669141356285484832714579909193472000520054778562574557919075196615113391572241551420819584049234452957591824067947224485857088346537217365148367715383834065655302680063460218688796327429145325373286347388385746706609370818310947729062232324167169676082871779607628777529486665949613993954817520086286108926026655160013417419694993251027866486506192614015581764012011372707555653217143071230353359315525489524496401751807246072227472509941090361617933005757460947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78a6fff0f850751ff3bec90c6186ee24c8a85c55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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