api.hdfcfund.com

- HDFC ASSET MANAGEMENT COMPANY LTD -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 43:a9:e7:d2:ab:d5:d9:06:e8:72:0f:bd:39:66:5b:42 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HDFC ASSET MANAGEMENT COMPANY LTD

Organization: HDFC ASSET MANAGEMENT COMPANY LTD
Organization unit: HDFCAMC
State / Province: MAHARASHTRA
Locality: MUMBAI
Country: IN

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:a9:e7:d2:ab:d5:d9:06:e8:72:0f:bd:39:66:5b:42
Serial Number (int): 89940475814394783645140190568647121730
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 39:be:60:1a:fe:13:22:6f:e3:32:c3:af:8d:d9:18:97:05:d1:b1:13
Fingerprint (sha256): 28:88:28:bf:cf:97:87:8a:9d:eb:76:a0:36:aa:49:3a:09:eb:5b:26:1d:c2:b1:d7:6c:ae:c5:62:eb:18:6f:24

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate api.hdfcfund.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.hdfcfund.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.hdfcfund.com

Other certificates including the domain name hdfcfund.com

(limited to 100 certificates)
elearn.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
beta-distributor.hdfcfund.com
elearn.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
amcoeuat.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
pms.hdfcfund.com
sni.cloudflaressl.com
ekyc.hdfcfund.com
elearn.hdfcfund.com
beta-api.hdfcfund.com
mft1.hdfcfund.com
mpower.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
ssl631739.cloudflaressl.com
sni.cloudflaressl.com
humanresource.thepawscuers.life
ssl631741.cloudflaressl.com
ssl631741.cloudflaressl.com
servicedesk.celestialsys.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
api.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
sharedealing.hdfcfund.com
web.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
uatdistributor.hdfcfund.com
prisma.hdfcfund.com
investor.hdfcfund.com
elearn.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
vision.hdfcfund.com
pms.hdfcfund.com
gitlab.hdfcfund.com
distributor.hdfcfund.com
sni.cloudflaressl.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
*.hdfcfund.com
sni174955.cloudflaressl.com
gitlab.hdfcfund.com
ssl631739.cloudflaressl.com
elearn.hdfcfund.com
hdfcfund.com
*.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
sni.cloudflaressl.com
investor.hdfcfund.com
gtac.plintron.in
pms.hdfcfund.com
ekyc.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
ssl631739.cloudflaressl.com
investor.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
api.hdfcfund.com
sni.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
beta-api.hdfcfund.com
elearn.hdfcfund.com
elearn.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
uat-investor.hdfcfund.com
distributor.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
sni.cloudflaressl.com
itcare.hdfcfund.com
ssl631740.cloudflaressl.com
servicedesk.celestialsys.com
ssl631740.cloudflaressl.com
beta-investor.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com

Certificate

The complete raw certificate details for api.hdfcfund.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YlsrAqAoeOuGcwmLZWw
g6J0Uro6YgC5ZL++PANjjM09oEQr41Oiy5k9gl+h/aDTtj6R/zWO+bPK2QJEToXo
3d4CaCDUBl7OdCBzq3aRQQ9AFgeXlu6cO3/MLh97neQqYGmWYR7zcpClgjXZXhfa
islCMuy2E+yGG9EO88q+HLmFGAN7xMBArxguk7d+CEofBGEJW3cPgQBzA1nLepV/
wAIwl4W4WiYntRZpj4d2nI50lB6VsRRfHrIEc16uDccYhX3tlXh+Q4gRTeRgUzPh
JzyUV5tUHXp2wP+BLSv8PphWBIHOsXaKzxmcim/Jd8+Hy1uNZ/OPQAhkZ7g7Uvrb
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89940475814394783645140190568647121730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MAHARASHTRA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MUMBAI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HDFC ASSET MANAGEMENT COMPANY LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HDFCAMC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.hdfcfund.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29481291603803350397576782552271170084713008108454169861708082786410820051275996831764689424778866991879609886199332671212911886125165902875141368554078073172517817007539993335282360252421142672106562180995293494126538304522984959491064325678887320206297200411702812287865817877504943253770126359794892735200012896531425666290136737072591817390791744604577736932721297403114723334491298421661422397563409885149073560128530375162585099001661935947976081404466450101008846721533476632225753106647247431382270378871118712395425631532695243053643903616234282010740407098330405179044766382773259902305270631236219570936789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hdfcfund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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