crm.handlink.com.tw

- Handlink Technologies, Inc. -

Issued by TWCA Secure Certification Authority

About this certificate

This digital certificate with serial number 47:df:00:00:00:00:13:6c:54:d0:eb:77:de:8a:88:c8 was issued on by TAIWAN-CA INC..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Handlink Technologies, Inc.

Organization: Handlink Technologies, Inc.
Organization unit: IT
State / Province: Taiwan
Locality: Hsinchu
Country: TW

TAIWAN-CA INC.

Organization: TAIWAN-CA INC.
Organization unit: SSL Security Services
Country: TW

This certificate has expire since

Certificate Details

Serial Number (hex): 47:df:00:00:00:00:13:6c:54:d0:eb:77:de:8a:88:c8
Serial Number (int): 95533069900182385260655780039620200648
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ee:c4:26:f6:09:3c:39:98:b9:25:a2:af:5b:dd:10:e7:15:f4:58:1f
AuthorityKeyId: 23:f5:38:50:f2:de:f4:7b:3e:ef:fd:ab:ab:51:31:03:0d:b8:f9:1d

Fingerprint (sha1): 20:8f:ec:64:b5:01:2d:79:d9:bf:57:d8:53:b9:f8:e0:13:99:64:3b
Fingerprint (sha256): 18:79:a8:cf:fd:9b:97:92:cd:7c:1b:33:75:04:3c:ff:13:b8:02:4b:8f:d8:fe:95:07:df:a6:2f:9e:2f:a6:2c


Revocation information

OCSP Server: http://sslocsp.twca.com.tw
CRL Distribution Point: http://sslserver.twca.com.tw/sslserver/cmdssl_revoke_2012.crl

Check the revocation status for certificate crm.handlink.com.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.handlink.com.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.handlink.com.tw

Other certificates including the domain name handlink.com.tw

(limited to 100 certificates)
crm.handlink.com.tw
dotproject.handlink.com.tw
crm.handlink.com.tw
crm.handlink.com.tw
www.handlink.com.tw
crm.handlink.com.tw
crm.handlink.com.tw
crm.handlink.com.tw
www.handlink.com.tw
crm.handlink.com.tw
crm.handlink.com.tw
dotproject.handlink.com.tw

Certificate

The complete raw certificate details for crm.handlink.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHZEo5QAj9VItgsIPR2k
u+kZmXgsUvs9r5X7SCbDzeUnIkwA0UNBjpXmT89gohYYfU2b2OAuTR+TbYbCKtwr
UlvUDYFPb+OymwoNt2N6RBld7Js/i1k4XLo3oXqnk66TSh8jOuuCfXb1TPpm4eBk
S90eR6+rV7OvvOynm0uCZoNSuwQYMFSPZNY+aVVd9nohPRyJbuY1Y9E3LIlHQ/EV
KrVNYUp+cLpkzbWT9F7GO1FzZFUiNSwCkwO5pHv0fu42BBY43pQHTdSud9wicHOP
gvzxVza0+C4CFcvtxvTXE43xD4XIeq8oDM9zOIhssWQgTaAY2bmGmJSjtokIwoIK
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95533069900182385260655780039620200648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN-CA INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL Security Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TWCA Secure Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-10 09:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-18 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Taiwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hsinchu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Handlink Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'crm.handlink.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24296074737573471864217281092470730760273846162912593012878833573540029485416019148167502752103561145446969014151358422141173786792194109066287267408651357874347689773558397544003852832458625305317734982510102497498778393638758338180350746804732084273120202555590795737757463555566193714928575830405235071046616254146669688625973320052713320059790220811596553699581463468941173471224995927813572731552854525017575695438448979068106968110693042282324787170722003839854192788209367628935333227422288939540232354514226378757372678745784730680656144178866939784095099055807381017198856166760204915375295273150438598380053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 23f53850f2def47b3eeffdabab5131030db8f91d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eec426f6093c3998b925a2af5bdd10e715f4581f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/sslserver/cmdssl_revoke_2012.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.handlink.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslocsp.twca.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.158.3.1.8.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.twca.com.tw/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 115 116 114 105 99 116 105 111 110 32 61 51 46 50 46 49 46 49]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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