mobiletest.taipeifubon.com.tw

- Taipei Fubon Bank -

Issued by TWCA Secure Certification Authority

About this certificate

This digital certificate with serial number 40:01:33:05:bf:00:00:00:00:00:00:00:6f:a7:bb:61 was issued on by TAIWAN-CA INC..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Taipei Fubon Bank

Organization: Taipei Fubon Bank
Organization unit: Terms of use at IT
State / Province: Taiwan
Locality: Taipei
Country: TW

TAIWAN-CA INC.

Organization: TAIWAN-CA INC.
Organization unit: SSL Security Services
Country: TW

This certificate has expire since

Certificate Details

Serial Number (hex): 40:01:33:05:bf:00:00:00:00:00:00:00:6f:a7:bb:61
Serial Number (int): 85076818885235386375862399760113056609
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:31:29:f1:e5:a0:c4:2b:69:09:d9:74:1b:ea:03:03:90:56:e1:b7
AuthorityKeyId: 23:f5:38:50:f2:de:f4:7b:3e:ef:fd:ab:ab:51:31:03:0d:b8:f9:1d

Fingerprint (sha1): b4:67:fb:0f:6e:a4:7a:a3:4d:e9:42:c5:8c:cf:94:4d:bc:ef:30:d0
Fingerprint (sha256): 14:36:dd:60:de:f5:8f:0a:1b:bc:70:7a:22:94:fc:06:fe:90:b4:12:8c:a4:74:ef:29:b0:69:10:21:9e:7e:77


Revocation information

CRL Distribution Point: http://sslserver.twca.com.tw/sslserver/cmdssl_revoke_2012.crl

Check the revocation status for certificate mobiletest.taipeifubon.com.tw

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobiletest.taipeifubon.com.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name taipeifubon.com.tw

(limited to 100 certificates)
api.taipeifubon.com.tw
ipptest.taipeifubon.com.tw
ebank.taipeifubon.com.tw
ccpg.taipeifubon.com.tw
cmlfapp.taipeifubon.com.tw
ebanktest.taipeifubon.com.tw
hpsmobile.taipeifubon.com.tw
mobiletest.taipeifubon.com.tw
wbins.taipeifubon.com.tw
nmplusinvestment.taipeifubon.com.tw
mobiletest.taipeifubon.com.tw
cloudtest.taipeifubon.com.tw
fco.taipeifubon.com.tw
ebank.taipeifubon.com.tw
ebank.taipeifubon.com.tw
content.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
esrvtest.taipeifubon.com.tw
cloud.taipeifubon.com.tw
efin.taipeifubon.com.tw
ibonus.taipeifubon.com.tw
mobile.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
school.taipeifubon.com.tw
efin.taipeifubon.com.tw
school.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
epg.taipeifubon.com.tw
emis.taipeifubon.com.tw
linebc.taipeifubon.com.tw
fund.taipeifubon.com.tw
ccdtest.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
dof.taipeifubon.com.tw
esrvtest.taipeifubon.com.tw
bnkvpn2.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
fco.taipeifubon.com.tw
linebctest.taipeifubon.com.tw
mobile.taipeifubon.com.tw
fco.taipeifubon.com.tw
tcmlffl.taipeifubon.com.tw
esrv.taipeifubon.com.tw
fbchat.taipeifubon.com.tw
esrv.taipeifubon.com.tw
mobile.taipeifubon.com.tw
ccdtest.taipeifubon.com.tw
accessible.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
mobile.taipeifubon.com.tw
ebank.taipeifubon.com.tw
school.taipeifubon.com.tw
fco.taipeifubon.com.tw
uatdof.taipeifubon.com.tw
school.taipeifubon.com.tw
wms.taipeifubon.com.tw
ebank.taipeifubon.com.tw
nmplusinvestmenttest.taipeifubon.com.tw
ebank.taipeifubon.com.tw
tepay.taipeifubon.com.tw
tcmlfapp.taipeifubon.com.tw
epg.taipeifubon.com.tw
tcmlffl.taipeifubon.com.tw
testwechatpay.taipeifubon.com.tw
epg.taipeifubon.com.tw
paygwcldtest.taipeifubon.com.tw
ebank.taipeifubon.com.tw
ccpg.taipeifubon.com.tw
wechatpay.taipeifubon.com.tw
accessible.taipeifubon.com.tw
ccd.taipeifubon.com.tw
bhu.taipeifubon.com.tw
mobiletest.taipeifubon.com.tw
ccpgtest.taipeifubon.com.tw
mobiletest.taipeifubon.com.tw
epgt.taipeifubon.com.tw
esrv.taipeifubon.com.tw
esrv.taipeifubon.com.tw
school.taipeifubon.com.tw
mobile.taipeifubon.com.tw
ccpg.taipeifubon.com.tw
itms.taipeifubon.com.tw
cmstest.taipeifubon.com.tw
mkt.taipeifubon.com.tw
esrv.taipeifubon.com.tw
mobile.taipeifubon.com.tw
wechatpay.taipeifubon.com.tw
wbins.taipeifubon.com.tw
creditcardtest.taipeifubon.com.tw
fund.taipeifubon.com.tw
mobile.taipeifubon.com.tw
mmk.taipeifubon.com.tw
fund.taipeifubon.com.tw
accessible.taipeifubon.com.tw
testwechatpay.taipeifubon.com.tw
tcmlfapp.taipeifubon.com.tw
creditcard.taipeifubon.com.tw
school.taipeifubon.com.tw
wifivpn.taipeifubon.com.tw
creditcardtest.taipeifubon.com.tw

Certificate

The complete raw certificate details for mobiletest.taipeifubon.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tzfk4zd+03OmYv+LNqd
S+1yZwzBs/YRgaqDHr7O93YnZFSzpybu5Jga5NvVMWxgMa7gnMlXxxtgkYBbXGeh
uS1Ng3ZhXbfaO701ulR1VNH+QT4vhadzFhE16LSyObACOUezZUwPZuvE//fvNryG
CXALUD8mE1kH3IIzJrNU1pxYWCofT4rQt8gD6AXBouDc3MFNgD/IhnlwPYzjLJPl
RSO2lLSlk6dEuMnyg1BA393wHgRgjcBAWn4sNIjCvKNSrAveZviZPrfBLmK1TOkp
mNnXqpzmRwAH5HLd49Ko85IlppjB4ojDPnhlQ+JxoG4/evFxRVrSOSbXcBDBRReH
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85076818885235386375862399760113056609
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN-CA INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Security Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TWCA Secure Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-23 06:05:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-06 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taiwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taipei'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taipei Fubon Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobiletest.taipeifubon.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27628867188494363672494923316756197816710670076553913592871843236642050340591447447923143192053984078328540315298216478220375128996122906269488605617519674840203799840474585123886983052303322822029898202770924548516303316566354810775677104718288237412501886998424361639737744298140303676855174705290779000884935147398841463861617647628912459904473636499994391966516203206724106503967358539442110436626340143949854506641010326214959880187870877613141258544299748706979550777673013009843672968875461553513984696656296157383974032267571352222790139344347016150231684850539718351016989044107886043200604052816306665654051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 23f53850f2def47b3eeffdabab5131030db8f91d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							863129f1e5a0c42b6909d9741bea03039056e1b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/sslserver/cmdssl_revoke_2012.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.158.3.1.8.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 115 116 114 105 99 116 105 111 110 32 61 51 46 50 46 49 46 49]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'www.twca.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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