qrt4.securemail.hinet.net

- 中華電信股份有限公司 -

Issued by

About this certificate

This digital certificate with serial number 69:75:b6:61:af:e9:52:dc:01:57:78:ad:63:d2:c6:e1 was issued on by Chunghwa Telecom Co., Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • If certificate policy 2.23.140.1.2.2 is included, localityName or stateOrProvinceName MUST be included in subject (BRs: 7.1.6.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

中華電信股份有限公司

Organization: 中華電信股份有限公司
Country: TW

Chunghwa Telecom Co., Ltd.

Organization: Chunghwa Telecom Co., Ltd.
Organization unit: Public Certification Authority - G2
Country: TW

This certificate has expire since

Certificate Details

Serial Number (hex): 69:75:b6:61:af:e9:52:dc:01:57:78:ad:63:d2:c6:e1
Serial Number (int): 140180137427986317702233280128115459809
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 53:14:e8:76:7e:26:70:43:06:ec:9b:22:e0:25:2b:7c:d3:96:22:6f
AuthorityKeyId: cb:83:7d:65:15:af:a9:c9:f3:a8:a9:f4:64:7c:79:52:05:74:40:61

Fingerprint (sha1): 93:11:3c:a4:44:c1:50:bf:87:3c:0f:53:b1:df:88:f8:23:d3:4f:13
Fingerprint (sha256): 17:88:b2:23:3d:40:92:1c:1d:f3:f6:ef:af:0a:47:ef:60:be:30:55:ea:9e:7d:3b:d6:b0:e6:ac:95:34:38:3a

Issuing Certificate URL: http://repository.publicca.hinet.net/certs/IssuedToThisCA.p7b

Revocation information

OCSP Server: http://ocsp.publicca.hinet.net/OCSP/ocspG2
CRL Distribution Point: http://repository.publicca.hinet.net/crl/PubCAG2/1000-1/complete.crl
CRL Distribution Point: http://repository.publicca.hinet.net/crl/PubCAG2/complete.crl

Check the revocation status for certificate qrt4.securemail.hinet.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qrt4.securemail.hinet.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qrt4.securemail.hinet.net

Other certificates including the domain name hinet.net

(limited to 100 certificates)
223-200-181-79.hinet-ip.hinet.net
36-236-212-230.dynamic.hinet.net
*.myweb.hinet.net
ms1.hinet.net
*.talk.hinet.net
testsafebrowsing.hinet.net
antithreat.soc365.hinet.net
hisecure.hinet.net
api.cf.dsp.hinet.net
36-236-152-64.dynamic.hinet.net
122-116-221-73.hinet-ip.hinet.net
iview.hivideo.hinet.net
a4sign.hinet.net
hikey.hinet.net
149-129-120-168.hinet-ip.hinet.net
www.adm.kod.hinet.net
36-236-188-184.dynamic.hinet.net
qrt6.securemail.hinet.net
*.hinet.net
s5.wpc.edgecastcdn.net
*.owastage.cloudbox.hinet.net
36-236-219-58.dynamic-ip.hinet.net
36-236-197-76.dynamic-ip.hinet.net
1-172-68-179.dynamic-ip.hinet.net
1-171-172-241.dynamic.hinet.net
test.stbs.hinet.net
ottapi2test.media.hinet.net
itri-iod.hicloud.hinet.net
ra.testev.hinet.net
*.hinet.net
*.webmail.hinet.net
*.userportal.hicloud.hinet.net
aaaview.hinet.net
good.epkig2ov.hinet.net
*.idc.hinet.net
hipay.hinet.net
s5.wpc.edgecastcdn.net
emcrm.hinet.net
feeds.cms.hinet.net
mail.colocation.hinet.net
sdc.hivideo.hinet.net
ott.hinet.net
*.biz-mail.hinet.net
s5.wpc.edgecastcdn.net
web.sms.hinet.net
sdc.hivideo.hinet.net
*.hinetfax.hinet.net
152-89-171-68.hinet-ip.hinet.net
hiwinner.hinet.net
149-129-120-168.hinet-ip.hinet.net
testea.hinet.net
220-132-94-72.hinet-ip.hinet.net
eshopmanager.hiwinner.hinet.net
trafficinfo.hinet.net
parent.hinet.net
*.quarantine.hinet.net
sng.hinet.net
skylens.hinet.net
ips.soc365.hinet.net
111-250-219-61.dynamic-ip.hinet.net
dn.hinet.net
*.himail.hinet.net
cek.learn.hinet.net
125-227-156-103.hinet-ip.hinet.net
secure365.hinet.net
village.hinet.net
*.ivs.hinet.net
ttt-aq.ioc.hinet.net
ev.hinet.net
times.hinet.net
fttb.hinet.net
220-134-204-148.hinet-ip.hinet.net
skylens.hinet.net
hib2border.hinet.net
36-236-221-198.dynamic-ip.hinet.net
1-34-234-161.hinet-ip.hinet.net
47-240-109-87.hinet-ip.hinet.net
61-216-36-84.hinet-ip.hinet.net
aaaapi.hinet.net
tls.hinet.net
pki.hinet.net;;eca.hinet.net;;epki.com.tw
*.aay.hinet.net
s5.wpc.edgecastcdn.net
member2.hinet.net
test.hiott.hinet.net
highwaybus.hinet.net
feeds.hifree.hinet.net
36-236-195-92.dynamic-ip.hinet.net
36-236-197-144.dynamic-ip.hinet.net
hievent.hinet.net
aaaservice.hinet.net
village.hinet.net
multipay.hinet.net
alltaipeiland.hinet.net
36-236-179-228.dynamic.hinet.net
WLANAC.HINET.NET
36-236-174-50.dynamic-ip.hinet.net
cars.hinet.net
soc365.hinet.net
testriskeye.hinet.net

Certificate

The complete raw certificate details for qrt4.securemail.hinet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwydJlvGsuuNyE251XGhK
digMbgMtc9Uf5+SVQs/XdC8E/STV85TuOzoYT7O8uao8KG/OZsrcBHwsrWHZiZHS
qkU2ys5ncdP0Hx37Qi9oY36YxTdoIgHsdZptF1kp0B1yofzEHEp3lSciJ/kVmAWE
QhBXcZdM4Vnt5NojswPUU+Y/cFs2UNoHYvb5puhmS/i3XnTzizotiWUCGeo6cgQm
qxo5X3vNSrOMfgOTEKL4W75oebXP0aLZ5aRmAdA6EEfYLSGLpyryy1mTX89bUDHs
GSz8ABSewxx++bMXP9bHYj9ztcGS+oHftoIbOyu9sG0gMFDM4d0iihxjyBFdKGU7
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140180137427986317702233280128115459809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chunghwa Telecom Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Public Certification Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-07 01:26:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 01:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中華電信股份有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'qrt4.securemail.hinet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24635842836703038999174205067293109696485379021430555915724702918458588168989244608343857323114108120257368959459832134926910813372894252334052690822286034975141857369612999917406668695013168827512442677063443907745169211290702802562882388623228742137371971132489492642080167619882373713485456692259760883158110695652309937629046053113457315716763421324610668814711079830242331565274167945404384645871074864633846812657529660330955916713185746435204293871025056033199293277263267350422929466787570699756054856433601050341609075868974145553075383305877686654494065149702815110456312525053179015194193132498801989598087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/certs/IssuedToThisCA.p7b'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.publicca.hinet.net/OCSP/ocspG2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23459.100.0.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cb837d6515afa9c9f3a8a9f4647c795205744061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/crl/PubCAG2/1000-1/complete.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.publicca.hinet.net/crl/PubCAG2/complete.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrt4.securemail.hinet.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5314e8767e26704306ec9b22e0252b7cd396226f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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