DV SSL/TLS Certificate for www.nestor.com.tw

Certificate is witin its validity period

Issued by Certera (Certera DV SSL CA)

About the www.nestor.com.tw DV SSL/TLS Certificate

This certificate with serial number d5:1d:03:c2:a2:b9:d3:cc:16:35:f6:9f:35:79:9b:5c for www.nestor.com.tw was issued on by Certera.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.nestor.com.tw provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certera

Organization: Certera
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): d5:1d:03:c2:a2:b9:d3:cc:16:35:f6:9f:35:79:9b:5c
Serial Number (int): 283276215978938152703781793691422268252
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: 58:32:7f:1f:af:90:55:74:c5:fb:51:6f:20:a9:c3:7a:26:d4:18:8c
Authority Key Identifier: d3:7a:87:3a:c6:92:59:ff:e2:7d:b2:0d:33:e8:f6:84:fa:a5:70:68

Fingerprint (SHA-1): 34:dc:62:6b:ed:3a:e5:89:d5:8d:77:bd:1c:95:95:f2:bb:a7:0f:43
Fingerprint (SHA-256): 22:13:ab:7d:d8:14:15:1e:7f:61:ce:d6:ea:61:45:14:35:00:b6:b7:fa:9e:52:59:91:ef:1f:83:bb:94:10:c2

Issuing Certificate URL: http://Certera.crt.sectigo.com/CerteraDVSSLCA.crt

Revocation Information

OCSP Server: http://Certera.ocsp.sectigo.com

Check the revocation status for certificate www.nestor.com.tw
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.nestor.com.tw

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.nestor.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283276215978938152703781793691422268252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certera DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nestor.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768306370923912841569147746365357377250768494343957017902082999479664602460582026650831363169465141960006849521592309537058977270765485630033260971654664192507092022590992119261827139029402583345772169069934630916729227817005671097520602360958867110271206158396653492511725658251629581695192164575044486240959156630783214411731548038777830782132125934806042673439275337082225437640821380292789915649361451980751023909908392091559704759038066146663313019127281942501944815432403147359318901956800282134325179993039864235701114018142712417741268622831219183459114411652794941428034181748068958568976993978813197784576051257967040673386360506694457888736543616323025343311000434069276363996289473700693565649748670954082266403598561053259484567336282344572058769141733831139438408114674455200519016442241257088941192413463460670916044895257593677298753426356627261076654824648935552982861740910546180337221356787749570643770180702980652683474801849814794477606916964293811189222871706387984639669154441225357859109619284722208702458379645243277356069802564263124888331216306953536930330912627042922923876750114501703408735458617192044743068755359793472813181587842253110219514765444052841245622048502768524481977305731153130597403083103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d37a873ac69259ffe27db20d33e8f684faa57068
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58327f1faf905574c5fb516f20a9c37a26d4188c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.101
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Certera.crt.sectigo.com/CerteraDVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://Certera.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestor.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestor.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019399e4fd040000040300473045022100a0d693d6f00c6d213ae551c1f0f61eaf3627e7ca9412142707d79bce7937198302205978034d615b2c6393e6fde713a22eb3739dbf9e532ff9ddd16b82639fe9b561007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019399e4fcdd0000040300483046022100c9f0ae3dff660d911c5848c8e418090356a0ba4986af7b5a7d32d7423716c4d3022100fd38f3a3d8f8073fa2e5a02b7c1ad6e044948cef2511c6c5fc2bca7346448b2500760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019399e4fcb00000040300473045022002b74b96448b171d7ed117d95c341df20f9b53ca54058b5339492243071f0e25022100d948b870804b8a6963b5e46832e8f2a6865d9443ed05a46413f80eab35464ad5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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