epapers.timesgroup.com

- Bennett Coleman & Co. Ltd. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 55:5d:01:5f:ef:dd:c1:9f:76:d2:7a:74:f6:12:e2:87 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bennett Coleman & Co. Ltd.

Organization: Bennett Coleman & Co. Ltd.
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 55:5d:01:5f:ef:dd:c1:9f:76:d2:7a:74:f6:12:e2:87
Serial Number (int): 113467291132881634984821278134898975367
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b4:d5:97:96:34:fc:87:4f:a8:f7:2a:70:32:46:2a:b6:45:ef:16:34
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b1:df:95:78:0c:1c:db:ee:03:e6:b7:9e:b8:d3:94:1c:f8:83:28:8d
Fingerprint (sha256): 13:97:d1:d4:93:20:8b:f8:b5:b6:02:bb:9a:a8:b2:9c:e4:da:f0:ce:84:ea:40:1f:b0:6c:68:a6:1c:5f:8e:2d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate epapers.timesgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epapers.timesgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epapers.timesgroup.com
www.epapers.timesgroup.com

Other certificates including the domain name timesgroup.com

(limited to 100 certificates)
timesspecials.timesgroup.com
*.Timesgroup.com
servicedesk.gainsight.com
itsm.clinnex.com
*.Timesgroup.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
*.timesgroup.com
ig.infogain.com
epapers.timesgroup.com
epaper.timesgroup.com
www.torqus.com
endpoint.manageengine.live
servicedesk.vsoftconsulting.com
*.timesgroup.com
careers.timesgroup.com
servicedesk.decisionfoundry.com
care.spacematrix.com
ig.infogain.com
humanresource.thepawscuers.life
rms.timesgroup.com
itservicedesk.timesgroup.com
onedesk.tataplay.com
access.timesgroup.com
rms.timesgroup.com
timesofabetterindia.com
servicedesk.celestialsys.com
timesspecial.com
*.Timesgroup.com
onedesk.tataplay.com
epaper.timesgroup.com
servicedesk.celestialsys.com
servicedesk.gainsight.com
taops.fractal.ai
www.torqus.com
timesofabetterindia.com
*.Timesgroup.com
epapers.timesgroup.com
customer-sdpondemand.manageengine.in
mcadmin.timesgroup.com
servicedesk.celestialsys.com
itdesksupport.amphenol-omni.com
www.torqus.com
itservicedesk.timesgroup.com
care.spacematrix.com
timesofabetterindia.com
servicedesk.vsoftconsulting.com
*.olivesoftware.com
care.spacematrix.com
itdesksupport.amphenol-omni.com
access.timesgroup.com
onedesk.tataplay.com
eisamaygold.timesgroup.com
servicedesk.celestialsys.com
subscribe.timesgroup.com
*.timesgroup.com
cmsexternalapi.timesgroup.com
matagold.timesgroup.com
bestoftheworld.in
customer-sdpondemand.manageengine.in
itservicedesk.exeevo.com
itcare.theleela.com
customer-sdpondemand.manageengine.in
ithelpdesk.vadilalgroup.com
www.torqus.com
itsm.clinnex.com
itservicedesk.exeevo.com
mail.timesgroup.com
itservicedesk.timesgroup.com
mail.timesgroup.com
gtac.plintron.in
itdesksupport.amphenol-omni.com
helpdesk.allinoneservices.in.net
access.timesgroup.com
customer-sdpondemand.manageengine.in
care.spacematrix.com
hr.aletheiagroup.co.in
*.olivesoftware.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
timesnet.timesgroup.com
www.giftet.timesgroup.com
app.iambengaluru.epaper.timesgroup.com
*.Timesgroup.com
*.dam.timesgroup.com
itcare.hdfcfund.com
servicedesk.celestialsys.com
epaper.timesgroup.com
care.spacematrix.com
itservicedesk.timesgroup.com
itcare.theleela.com
iambengaluru.epaper.timesgroup.com
servicedesk.kbl.co.in
itsm.clinnex.com
timesofabetterindia.com
itcare.hdfcfund.com
mcadmin.timesgroup.com
itcare.hdfcfund.com
customer-sdpondemand.manageengine.in
servicedesk.gainsight.com

Certificate

The complete raw certificate details for epapers.timesgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTJzIkOT7qpY/dCbFJyU
nBEpLpTUKyIJFNrLVNv4lGfdT4DfNUBQM4hqgwLeAjX2Ex8vqh34RPPuF3+0Y0ht
+i73tfIgHIWxI4GdQjBkcBxcfvJ6Q6pwIj3QUXVqMHe8x1lfPtoWy9iUU+/u2Ip1
WB24xZz8NwCXJvWqHYbau7PL0+QD3RVZpAQgYkGniNItKNO5aa+/b2xZxl5j7OoH
fn7Vlv53YycVAILSvevXXW2zqahGXE7F9dLi1JXMZYfm5sX9NiSxgREZk+QS44dK
0Lyuh2rN5F2n5vS7u8HC0V8OUOJW7WDzI7R46B6kTzri1PaKFr9QE4s59CB+eADv
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113467291132881634984821278134898975367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 08:37:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-06 08:37:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bennett Coleman & Co. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epapers.timesgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20349244794311331606014017666470026739365676269437073257230768619392329013598510471217343979172674418302613944336010344623786427406364169155149166267031719465396503924019506501832079683891447487501042981547484530842814460537453854499417027368514994817541538637122371074736368381042592578468793855168325474754533724176449917953155674162420321138173511178007469129654574545152579356227173282890241441045137768059899680786612492782882741256159857326283410754486644855990094654791232660050144875518105916232539823595985708186249001213714575337093213343492348061993241130297461926477059470853356559441231462617170122436451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4d5979634fc874fa8f72a7032462ab645ef1634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epapers.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epapers.timesgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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