www.sif2.ro

- SIF MOLDOVA SA -

Issued by certSIGN Enterprise CA Class 3 G2

About this certificate

This digital certificate with serial number 20:06:05:16:70:60:05:36:bd:8d:15:41:74:3e:f4:ba was issued on by certSIGN.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SIF MOLDOVA SA

Organization: SIF MOLDOVA SA
Organization unit: IT
State / Province: Bacau
Locality: Bacau
Country: RO

certSIGN

Organization: certSIGN
Organization unit: certSIGN Enterprise CA Class 3 G2
Country: RO

This certificate has expire since

Certificate Details

Serial Number (hex): 20:06:05:16:70:60:05:36:bd:8d:15:41:74:3e:f4:ba
Serial Number (int): 42566552836114513071149398743410734266
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3f:57:2f:0a:ab:bc:c8:d4:0e:22:d3:05:bc:95:8a:14:6f:3e:14:80
AuthorityKeyId: f6:eb:98:9e:40:69:ab:48:60:9d:46:16:ff:9e:c0:3b:03:ba:9b:fd

Fingerprint (sha1): d4:33:25:4f:df:d4:75:37:ea:f2:fa:94:23:30:f3:b0:e9:e8:c4:08
Fingerprint (sha256): 13:8f:d1:44:be:11:24:18:43:09:16:eb:c9:cd:cd:b8:ef:e8:fa:2f:d6:5d:49:98:88:07:ea:bb:d8:87:ca:03

Issuing Certificate URL: http://www.certsign.ro/certcrl/enterpriseg2.crt

Revocation information

OCSP Server: http://ocsp.certsign.ro
CRL Distribution Point: http://crl.certsign.ro/enterpriseg2.crl

Check the revocation status for certificate www.sif2.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sif2.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sif2.ro

Other certificates including the domain name sif2.ro

(limited to 100 certificates)
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro

Certificate

The complete raw certificate details for www.sif2.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/JZY1lcWYPn+Jnq/oaz
uOu31EeT4Q9aERzsX0t3aP1LksdfZ8/LwtVbkyvWZErcjnQGAm05VpWnSFLIQPha
q3aMKetNBKUpn2of4Ko+213LcOGB3yZhN/VYEVvsqVmQT6UWABUSbZxQIgz0he/o
51bPHYuExMnpMHQtmtI+UwyNlvYpMGsOyjwaI1ogs3kP+KdkF5R8bvQGSV+Numoc
1tOUiu9B+ByLxOfEv3FHDgwY0bHrkMtNrE6aNSqWH57wM8EAeJgM8Q3Hwr7x0Mov
s6xkYsQgfw3e5MrZyueBGX/wDgdHZR1LQrUv0WyRy7cCkQJQjzO/yokCHUYOqnsH
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42566552836114513071149398743410734266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN Enterprise CA Class 3 G2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN Enterprise CA Class 3 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 14:22:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 14:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bacau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bacau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SIF MOLDOVA SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sif2.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20191397320493965819997431885997878928385282844248649074521616148490266017724510899646284934880381650116872439765016851115149035232921625927885331780772913870317979410191623788932883182693153526224895407887115583371452838697033536867212687003779400801356778084452573097037251482475664923976904389264304818719716178562042237762487500429671284973656067707966119086124972326611796026200894955422490809478819647136721272327593258242386595984466465505542738232322807411183924358746669291217118008605724020969162597832315418588845316037401498384109954761855568555781949613180092409504402887592270048112986148177083289503501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certsign.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certsign.ro/certcrl/enterpriseg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f6eb989e4069ab48609d4616ff9ec03b03ba9bfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f572f0aabbcc8d40e22d305bc958a146f3e1480
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25017.1.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certsign.ro/enterpriseg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sif2.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cb491a5aa000004030047304502206f5495b8b121f830e4a9a4efbfb933923bf727204fa8913fc08ecfc69c2a4e9a022100af6b3c481e02516123b13d9f359809d3cf46a94244cc93278eada5e525e8faf4007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cb491a6850000040300483046022100f489815f513fac6384d601ef181d6029c5ee00472ed5dc25d442d3913d54c7200221009f1be8b28842e03d4fd264174e48ecb869bb772ff80dba04f8826eae0644323a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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