www.shaparak.ir

- SHAPARAK -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:a9:88:fb:f0:a0:b8:ae:4e:bf:77:e0:20:7c:f0:09:98 was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SHAPARAK

Company registration number: 10320718470
Organization: SHAPARAK
Organization unit: IT DEPARTMENT
State / Province: TEHRAN
Locality: TEHRAN
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:a9:88:fb:f0:a0:b8:ae:4e:bf:77:e0:20:7c:f0:09:98
Serial Number (int): 1492363529741924884193035229664447715871128
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 24:46:1e:cf:3b:90:38:31:a1:40:e2:d9:4e:7a:f9:d4:c8:65:b3:de
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): a5:58:df:74:b6:d1:49:c2:40:32:f7:83:be:26:61:f7:68:55:c2:80
Fingerprint (sha256): 1d:c7:e0:70:50:7b:84:4b:ff:c9:4e:fe:6e:8c:6d:48:8d:b6:a2:0a:53:13:09:28:98:f4:e8:a6:37:4b:1d:01


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate www.shaparak.ir

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shaparak.ir

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shaparak.ir

Other certificates including the domain name shaparak.ir

(limited to 100 certificates)
hub.shaparak.ir
soha.shaparak.ir
ecd1.shaparak.ir
fcp.shaparak.ir
asan.shaparak.ir
fanava.shaparak.ir
kica.shaparak.ir
*.shaparak.ir
pec.shaparak.ir
bpm.shaparak.ir
sayan.shaparak.ir
mms.shaparak.ir
sepehr.shaparak.ir
bpm.shaparak.ir
pep.shaparak.ir
pep.shaparak.ir
pec.shaparak.ir
my.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
pna.shaparak.ir
asan.shaparak.ir
ikc.shaparak.ir
mms.shaparak.ir
bpm.shaparak.ir
www.shaparak.ir
bpm.shaparak.ir
hub.shaparak.ir
say.shaparak.ir
hub.shaparak.ir
sep.shaparak.ir
asan.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
shaparak.ir
pec.shaparak.ir
pec.shaparak.ir
pep.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
mail.shaparak.ir
mms.shaparak.ir
sep.shaparak.ir
ikc.shaparak.ir
sayan.shaparak.ir
pecco.shaparak.ir
say.shaparak.ir
sep.shaparak.ir
tsm.shaparak.ir
bpm.shaparak.ir
fcp.shaparak.ir
sepehr.shaparak.ir
omid.shaparak.ir
sayan.shaparak.ir
shaparak.ir
pna.shaparak.ir
bpm.shaparak.ir
sadad.shaparak.ir
pec.shaparak.ir
mms.shaparak.ir
360.shaparak.ir
bpm.shaparak.ir
sep2.shaparak.ir
fcp.shaparak.ir
mabna.shaparak.ir
ikc.shaparak.ir
ecd1.shaparak.ir
ecd1.shaparak.ir
mms.shaparak.ir
shaparak.ir
my.shaparak.ir
pec.shaparak.ir
pna.shaparak.ir
asanapp.shaparak.ir
ikc.shaparak.ir
bpm.shaparak.ir
fanava.shaparak.ir
sandbox.shaparak.ir
mail.shaparak.ir
sep.shaparak.ir
sadad.shaparak.ir
say.shaparak.ir
shaparak.ir
tsm.shaparak.ir
mail.shaparak.com
pep.shaparak.ir
pec.shaparak.ir
pecco.shaparak.ir
mabna.shaparak.ir
sep2.shaparak.ir
say.shaparak.ir
fcp.shaparak.ir
pep.shaparak.ir
sep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
my.shaparak.ir

Certificate

The complete raw certificate details for www.shaparak.ir in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DOH45bHPL6GOsbhy5q7
ij2CSM7i2dqxRth+JZLl3vVAJJZNnZ659uQR8gGh1GQUyKHaVRmqhjGKU+uspbAc
IGGIZq9hfshbLtfL1qnQo1dwLADi0+Ll1VQuWFX8hfA8cBbqJxLsZ9ehovDKTSA0
0iV71icdPWu8dpIh1vBu6jmyTHioxBB58kBOmfHTp2xLz8n4X7rng20cFkgyvMbj
rw3ZFVnNDNKMmXoKl3JUA2WWqNSm41jKAPu/pVxsLWL/JnfNDalWX01QS+8eqwig
8NwguKXUG3vJigePJpQy2soEYhr+MYkIm0HwbkKUXPc72eJiZQNR3OKRkN5z5xoz
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492363529741924884193035229664447715871128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-06 13:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 13:33:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10320718470'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHAPARAK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shaparak.ir'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28807744324941952880530925047110419839919891307559475943384357343759952391198573086619109035644010988915857298592131473934543245879994012776414982664317860796646474856309865630108628318882399851017831009845180560745209635864416315447909750937329997044817199872379846008643915184841361505154474442456177961187342450039187616332983219771094880186123652488358616130688069623977102701138896178402428866448144026009342098713947074503800634245650209879264020195283760024195614345444666507837624913135771592842816826718497276045793175195793844755479766621756060386200679675870824340691673156418600933113994603183955791983371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shaparak.ir'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24461ecf3b903831a140e2d94e7af9d4c865b3de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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