pec.shaparak.ir

- SHAPARAK -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:b0:38:9e:ca:a5:f3:07:bd:56:c5:63:0e:57:53:ca:6e was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SHAPARAK

Company registration number: 420013
Organization: SHAPARAK
Organization unit: IT DEPARTMENT
State / Province: TEHRAN
Locality: TEHRAN
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:b0:38:9e:ca:a5:f3:07:bd:56:c5:63:0e:57:53:ca:6e
Serial Number (int): 1492372417064873550467865185330087549192814
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: c5:c1:40:a5:86:14:0b:b8:6c:fe:39:6b:6a:de:20:ea:a3:d7:db:75
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): 12:c8:88:f6:e3:36:13:cb:71:bf:5f:70:dd:c2:c3:6c:b5:0e:c4:bb
Fingerprint (sha256): 2a:da:78:b2:57:11:b9:e1:94:f0:0d:38:38:f3:d8:09:05:77:e2:18:4d:55:74:f8:eb:a6:14:79:71:a8:eb:5d


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate pec.shaparak.ir

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pec.shaparak.ir

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pec.shaparak.ir

Other certificates including the domain name shaparak.ir

(limited to 100 certificates)
hub.shaparak.ir
soha.shaparak.ir
ecd1.shaparak.ir
fcp.shaparak.ir
asan.shaparak.ir
fanava.shaparak.ir
kica.shaparak.ir
*.shaparak.ir
pec.shaparak.ir
bpm.shaparak.ir
sayan.shaparak.ir
mms.shaparak.ir
sepehr.shaparak.ir
bpm.shaparak.ir
pep.shaparak.ir
pep.shaparak.ir
pec.shaparak.ir
my.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
pna.shaparak.ir
asan.shaparak.ir
ikc.shaparak.ir
mms.shaparak.ir
bpm.shaparak.ir
www.shaparak.ir
bpm.shaparak.ir
hub.shaparak.ir
say.shaparak.ir
hub.shaparak.ir
sep.shaparak.ir
asan.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
shaparak.ir
pec.shaparak.ir
pec.shaparak.ir
pep.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
mail.shaparak.ir
mms.shaparak.ir
sep.shaparak.ir
ikc.shaparak.ir
sayan.shaparak.ir
pecco.shaparak.ir
say.shaparak.ir
sep.shaparak.ir
tsm.shaparak.ir
bpm.shaparak.ir
fcp.shaparak.ir
sepehr.shaparak.ir
omid.shaparak.ir
sayan.shaparak.ir
shaparak.ir
pna.shaparak.ir
bpm.shaparak.ir
sadad.shaparak.ir
pec.shaparak.ir
mms.shaparak.ir
360.shaparak.ir
bpm.shaparak.ir
sep2.shaparak.ir
fcp.shaparak.ir
mabna.shaparak.ir
ikc.shaparak.ir
ecd1.shaparak.ir
ecd1.shaparak.ir
mms.shaparak.ir
shaparak.ir
my.shaparak.ir
pec.shaparak.ir
pna.shaparak.ir
asanapp.shaparak.ir
ikc.shaparak.ir
bpm.shaparak.ir
fanava.shaparak.ir
sandbox.shaparak.ir
mail.shaparak.ir
sep.shaparak.ir
sadad.shaparak.ir
say.shaparak.ir
shaparak.ir
tsm.shaparak.ir
mail.shaparak.com
pep.shaparak.ir
pec.shaparak.ir
pecco.shaparak.ir
mabna.shaparak.ir
sep2.shaparak.ir
say.shaparak.ir
fcp.shaparak.ir
pep.shaparak.ir
sep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
my.shaparak.ir

Certificate

The complete raw certificate details for pec.shaparak.ir in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUIaQUlROaTCikim2q/+
AEv0yGW1alaFnc1++GwPe46jaDGK2ZPb51gcLH4vN4dlol9XysXPJetrLaxIOiD0
qIaa+ii6XCdSpgw7V10VWZj6+lfQGeON7872FOQxvffZhh8LgJUdffB+ec5l5NOz
Fgf7weTd/hxCXNJytVRZts9/b+QtUYZxQFOXgK1Wl/kMpVNOhsua1kkzRcu8Emeu
DwxIW0ZaBekAiGDI4Mu9FDLY0gZkgqo0466t/XLZFHvKVQUv7+KwFbnxHF7f4hYp
TnJxmUEDXgCnsoAxrtVjqk8FXwmS4VnPE5VahMt216Q91dMJgwcvXSkRMTevZJ3l
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492372417064873550467865185330087549192814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 15:16:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 15:16:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '420013'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHAPARAK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pec.shaparak.ir'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21871823145702806291653114318892232696506430893567375604966514479277959689466626095221304653418238912464790914163042071782651205756350864069471731190993899845226767934558525208670878640048875029353371565792353764095422324821416306881533724935349906109229361101205969752058595826686407639339082320764156523676736463717288915991082983362335420231910491644758571942663959613485087101909421506276021084524092657770419654677500527451325957362350197590092289715549205687909173248443857548873892590117514305504699904138588346352114872019838936520382126088354939846871706958975586726950113660792500750486417365935844818281777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pec.shaparak.ir'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5c140a586140bb86cfe396b6ade20eaa3d7db75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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