ua.egov-nsdl.com

- NSDL e-Governance Infrastructure Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d2:98:fe was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

NSDL e-Governance Infrastructure Limited

Organization: NSDL e-Governance Infrastructure Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d2:98:fe
Serial Number (int): 1355979006
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 88:87:56:01:d8:70:c8:a1:0e:ae:90:ab:df:87:13:ae:3d:27:8c:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5f:d5:24:a8:b8:c9:81:9c:72:87:cb:19:ee:30:f4:ef:c6:5d:af:b0
Fingerprint (sha256): 08:13:e3:e0:9f:4c:c8:93:bf:74:df:7b:54:dc:80:49:55:2a:a3:95:85:6f:76:0f:43:ad:48:23:95:e2:a9:e5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ua.egov-nsdl.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ua.egov-nsdl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ua.egov-nsdl.com
www.onlineservices.nsdl.com

Other certificates including the domain name egov-nsdl.com

(limited to 100 certificates)
preprodauth.egov-nsdl.com
tin.tin.nsdl.com
ua.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
esign.egov-nsdl.com
pregw.esign.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
esign.egov-nsdl.com
preprodsa.egov-nsdl.com
preprodsa.egov-nsdl.com
sa.egov-nsdl.com
preprodsa.egov-nsdl.com
ua.egov-nsdl.com
esign.egov-nsdl.com
tin.tin.nsdl.com
od.paammobile.egov-nsdl.com
pregw.esign.egov-nsdl.com
www.tin-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
tin.tin.nsdl.com
test.elearningservices.egov-nsdl.com
preprodsa.egov-nsdl.com
test.assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pandashboard.egov-nsdl.com
tin.tin.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
assisted-service.egov-nsdl.com
egovcafservices.nsdl.com
preprodauth.egov-nsdl.com
www.tin-nsdl.com
sa.egov-nsdl.com
tin.tin.nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
opvapi.egov-nsdl.com
preprodsa.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
tin.tin.nsdl.com
onlineservices.tin.egov-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
sa.egov-nsdl.com
ua.egov-nsdl.com
test.assisted-service.egov-nsdl.com
sa.egov-nsdl.com
onlineservices.epayment.nsdl.com
esign.egov-nsdl.com
pandashboard.egov-nsdl.com
ua.egov-nsdl.com
preprod.assisted-api.egov-nsdl.com
opvapi.egov-nsdl.com
ua.egov-nsdl.com
sa.egov-nsdl.com
www.tin-nsdl.com
esign.egov-nsdl.com
assisted-service.egov-nsdl.com
onlineservices.epayment.nsdl.com
pantan.egov-nsdl.com
tin.tin.nsdl.com
egovcafservices.nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
pandashboard.egov-nsdl.com
protean-health.com
tin.tin.nsdl.com
protean-health.com
pandashboard.egov-nsdl.com
pandashboard.egov-nsdl.com
pantan.egov-nsdl.com
health.egov-nsdl.com
esign.egov-nsdl.com
opvapi.egov-nsdl.com
od.paammobile.egov-nsdl.com
egovcafservices.nsdl.com
pregw.esign.egov-nsdl.com
www.ekyc.egov-nsdl.com
www.tin-nsdl.com
pantan.egov-nsdl.com
assisted-service.egov-nsdl.com
opvapi.egov-nsdl.com
pregw.esign.egov-nsdl.com
esign.egov-nsdl.com
preprodauth.egov-nsdl.com
ekycservices.egov-nsdl.com
tin.tin.nsdl.com

Certificate

The complete raw certificate details for ua.egov-nsdl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLSoRTyNnP1dzOKAyb5l
a1xc9+v2LBcOnAluLJmSq/fgk0B6qWpwyJHEYBOU0dk3+e8ylqTSFcU9Z+bYBU/h
+ummKSbFQAREiDps8XkkBEOpSHTPX+E2AukTA9scA82XvYkWF2VEMYTVYz0HObtY
yvLjlwEDBcxI0d5neQINzeFZe9Z0pClEz2OgtvcDWL6YTpBpO2He3VaLX6B8iFBt
mIN4Ml2k48gn8fCMy2LaHq+C2vm8Dlw/cQu3gGSP/LYz0bAhE2RZ3FqsCGcyQVa9
CWsy2XbtVQSW8f3DUnUKSHNll/rldR01jhDNo323a/3LvU08Ko+JfOC2xYFseFpz
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1355979006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-28 04:38:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 18:24:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSDL e-Governance Infrastructure Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ua.egov-nsdl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23821886771697002366620217076245953263457484905593364883684951587672348549998148090133354345300772080486610456374315857377672943312025488642325163177917538284934508222009698390427500422147114275486905185651817555655419443337035349870710954873707128899685891505720351720189946311830588040462003581784981762189610530159264211451859542633930235657182871189868145018323486471988658992181266308505809587402771941665584793589118500431112282776174179334851302123984491450048818239728431944153110195322451217259904183516008286379807134834180740624129969525123749703650589628190339866985171296680074474683311965169663535117243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.egov-nsdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineservices.nsdl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88875601d870c8a10eae90abdf8713ae3d278c9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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