AffirmTrust Validation Authority

- AffirmTrust -

Issued by AffirmTrust Certificate Authority - DV1

About this certificate

This digital certificate with serial number 49:12:cc:dc:1c:1f:ce:62:53:94:01:92:47:7c:4e:c6 was issued on by AffirmTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

AffirmTrust

Organization: AffirmTrust
Country: CA

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate will expire on

Certificate Details

Serial Number (hex): 49:12:cc:dc:1c:1f:ce:62:53:94:01:92:47:7c:4e:c6
Serial Number (int): 97131260086211415294916766281959755462
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 03:cc:84:bd:63:57:ee:14:74:f8:7a:53:ee:a9:ef:a2:a5:40:e3:75
AuthorityKeyId: 33:df:7a:3e:02:79:96:eb:b6:0c:c0:63:fa:75:bf:92:22:cd:91:fa

Fingerprint (sha1): 36:89:6f:2d:19:b6:18:1c:7e:54:20:c6:64:2b:0d:6f:f8:b0:2e:f2
Fingerprint (sha256): 0e:05:91:b8:5c:c0:74:8d:d4:90:9e:eb:5a:56:b0:82:73:7a:cc:a5:ac:83:ee:16:c4:69:5a:e1:a7:51:bc:67


Revocation information


Check the revocation status for certificate AffirmTrust Validation Authority

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AffirmTrust Validation Authority

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

OCSP Signing

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for AffirmTrust Validation Authority in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNFP5tXpDygWrSCMTCeL
uyOA1rgHwG8v+lTyzJ+Gd2AFYSfyD9sxGi4wsb/o3MEV6Z7Qw+AvAFsQzxgATfry
MtrLWSLX99irsyCqxzRTsjOmvbvARSxata9ui54/IjNPXTbXpcL1xEpo1ifAAFx4
bo62LKvPk4UV5pCuLs2oi0QZB0fn6e3Lzq+06GndrALdBZkgcfPEViwBYBN3Pkkv
rkLqZD9V/6tN2TXRT7qpf6jufVS5EdHuyJonYcZ44Nd/0rpb2eOPcWIyRklWXqgX
S0Ti25f2oTXiDv8rGAq9Dh9/vM3q6AA2f938uDLVK73vzfA4a6o13ptJ06FmpG7O
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97131260086211415294916766281959755462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - DV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 15:43:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-27 15:43:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Validation Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23331063765065012424922220253571791058895967264567285167855401383643116907162468615356506626451040829169486023767380918095323068345532957198104067575282206287907954413756064198504371492546916957865546131757626811771226726151536090142324958498271173807481100941051438499503389922389763584617149516804690861549663513855697712031869802113342775219244269815229618674092422818435073615360340245934729040673129330107054764407188073800159503261326081203579264498498930518089716950083019436981791372790778092789924294311947460813095478905589846699582014105428259648442699262112451394297320324377961551939513720040907464429121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03cc84bd6357ee1474f87a53eea9efa2a540e375
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 33df7a3e027996ebb60cc063fa75bf9222cd91fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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