jp.hrw.org

- Human Rights Watch -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 05:d4:c0:e2:14:80:2d:3b:ec:a5:1c:92:ad:ae:c0:3e was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Human Rights Watch

Organization: Human Rights Watch
Organization unit: Online
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d4:c0:e2:14:80:2d:3b:ec:a5:1c:92:ad:ae:c0:3e
Serial Number (int): 7750819047487248479468464908545212478
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 33:e9:77:89:58:95:0f:d9:1e:57:38:b1:a6:c7:f4:8c:48:b1:92:0a
Fingerprint (sha256): 0d:68:cc:c1:98:dc:6e:ab:09:d0:d1:70:8e:6a:85:d8:2b:71:30:18:bb:27:c7:e7:5c:37:35:e2:3e:d8:fa:91

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate jp.hrw.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jp.hrw.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jp.hrw.org

Other certificates including the domain name hrw.org

(limited to 100 certificates)
5769623379116032-fe2.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5659313586569216-fe4.pantheonsite.io
ssl.cdngc.net
5766596232478720-fe1.pantheonsite.io
*.hrw.org
hrw.org
ssl.cdngc.net
5769623379116032-fe2.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5659313586569216-fe4.pantheonsite.io
5658091668373504-fe2.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
jp.hrw.org
ssl.cdngc.net
5766596232478720-fe1.pantheonsite.io
ssl.cdngc.net
ssl.cdngc.net
5766596232478720-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
click.takeaction.hrw.org
5766596232478720-fe1.pantheonsite.io
ssl.cdngc.net
5769623379116032-fe2.pantheonsite.io
5746821397741568-fe3.pantheonsite.io
5659313586569216-fe4.pantheonsite.io
ssl.cdngc.net
5659313586569216-fe4.pantheonsite.io
ssl.cdngc.net
5659313586569216-fe4.pantheonsite.io
5658091668373504-fe2.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
*.hrw.org
ssl.cdngc.net
5685665089978368-fe3.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
ssl.cdngc.net
5769623379116032-fe2.pantheonsite.io
5658091668373504-fe2.pantheonsite.io
mail.hrw.org
5685665089978368-fe3.pantheonsite.io
ssl.cdngc.net
features.hrw.org
5635663080718336-fe3.pantheonsite.io
jp.hrw.org
5769623379116032-fe2.pantheonsite.io
media.hrw.org
5758142528880640-fe4.pantheonsite.io
5635663080718336-fe3.pantheonsite.io
ssl.cdngc.net
5635663080718336-fe3.pantheonsite.io
workfolders.hrw.org
5685665089978368-fe3.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
media.hrw.org
5766596232478720-fe1.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
5121503418908672-fe2.pantheonsite.io
5659313586569216-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
ssl.cdngc.net
ssl.cdngc.net
5659313586569216-fe4.pantheonsite.io
webmail.hrw.org
5769623379116032-fe2.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
5659313586569216-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
ssl.cdngc.net
5685665089978368-fe3.pantheonsite.io
ssl.cdngc.net
5659313586569216-fe4.pantheonsite.io
*.hrw.org
5766596232478720-fe1.pantheonsite.io
ssl.cdngc.net
ssl.cdngc.net
ssl.cdngc.net
5685665089978368-fe3.pantheonsite.io
5766596232478720-fe1.pantheonsite.io
ssl.cdngc.net
*.hrw.org
webmail.hrw.org
5769623379116032-fe2.pantheonsite.io
ssl.cdngc.net
ssl.cdngc.net
5685665089978368-fe3.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
5769623379116032-fe2.pantheonsite.io

Certificate

The complete raw certificate details for jp.hrw.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZBBjrzt65G5KOB2ll8
6C/2cUD6AUA3Pu4wieNiJpDUULMdu1cs1ju1O2vV6jaSSl1MSna/7hcU03Z+0myg
RaYfItnex4V7Ua6h5upbl4fa9cCnSIYc1UgZhj1qbR9LufRTbgOwb9vredg1qTHh
5wQrSH9anze0n72BYppVMqYHevieYF1vpmJtKBSwOocAK82EM9fzaU08m7XBLSmd
+GKMI/I5Ly+Nh1dffHXQL4TnqQztJa6Sy2pW7yR9ZTcGIwsFWAVCx4SFYj9Wt/Qn
/VgwC8VDcfF9rsAMI/yrH5Ezl0ZtlpYUzGvm0+c7OIi+vAzXXnh7vsC1T/aXM6Vu
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7750819047487248479468464908545212478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Human Rights Watch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Online'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'jp.hrw.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23499188474797725928183555902706488964223673590569386086830089702326017885574975843225841804660307415286272944151904442440989480150117353182404692012044829756258052158263903912893178057084727854570063847514696895856560368542533615228932903645015356543816916100783365096722330262338131912079029262892570442747792854094665046798940057948408828076698160275409905824002938745927652304262562741586112921222418499533804403016348681900355131213506632093999875986181538833385644110817784502074849128114207998034733435961520790370044293040214250399177005902098991040377114555768436450206911259787915788542790568767391099350589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.hrw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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