portal.e-tugra.com.tr

Issued by E-Tugra TLS RSA SubCA R1

About this certificate

This digital certificate with serial number 41:d6:84:4e:16:12:fe:3d:78:cb:f5:35:3c:ec:dd:43 was issued on by E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal.e-tugra.com.tr

E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI

Organization: E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI
Country: TR

This certificate will expire on

Certificate Details

Serial Number (hex): 41:d6:84:4e:16:12:fe:3d:78:cb:f5:35:3c:ec:dd:43
Serial Number (int): 87513654718441974480232291003358043459
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 79:60:2a:02:c5:0f:e4:09:8e:61:09:a9:c7:93:79:e2:35:8a:ba:d8
AuthorityKeyId: 00:38:1c:b3:17:e9:9a:e1:87:fb:bd:7c:64:6b:9b:6b:35:ac:12:99

Fingerprint (sha1): 99:04:c4:50:75:8d:cd:88:48:05:6c:c3:92:37:4c:d8:06:3a:20:e2
Fingerprint (sha256): 2d:e0:06:75:7c:cc:00:e9:7e:ed:0f:ec:16:21:61:a2:51:8a:10:87:bb:ea:44:a7:21:45:e4:ad:42:44:d9:a3

Issuing Certificate URL: http://cert.ssl.com/ETugra-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/ETugra-TLS-I-RSA-R1.crl

Check the revocation status for certificate portal.e-tugra.com.tr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.e-tugra.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.e-tugra.com.tr
www.portal.e-tugra.com.tr

Other certificates including the domain name e-tugra.com.tr

(limited to 100 certificates)
www.e-tugra.com.tr
evtest2.e-tugra.com.tr
evvalid.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
*.e-tugra.com.tr
sslov.e-tugra.com.tr
evtest4.e-tugra.com.tr
evvalidecc.e-tugra.com.tr
crm.e-tugra.com.tr
evvalid.e-tugra.com.tr
sslev2.e-tugra.com.tr
evtest2.e-tugra.com.tr
evrevoked.e-tugra.com.tr
*.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
anket.e-tugra.com.tr
www.e-tugra.com.tr
evtest.e-tugra.com.tr
evtest4.e-tugra.com.tr
*.e-tugra.com.tr
crm.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest.e-tugra.com.tr
evtest2.e-tugra.com.tr
portal.e-tugra.com.tr
www.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
evtestrevoked.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
evtest2.e-tugra.com.tr
evvalidecc.e-tugra.com.tr
*.e-tugra.com.tr
evtest4.e-tugra.com.tr
www.e-tugra.com.tr
sanalpos.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
*.e-tugra.com.tr
www.e-tugra.com.tr
evtest.e-tugra.com.tr
sslev.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
evtest1.e-tugra.com.tr
sslev.e-tugra.com.tr
rss.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest.e-tugra.com.tr
e-tugra.com.tr
www.e-tugra.com.tr
mail.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
e-tugra.com.tr
preodoo.e-tugra.com.tr
sslev2.e-tugra.com.tr
sslev2.e-tugra.com.tr
www.e-tugra.com.tr
*.rss.e-tugra.com.tr
preodoo.e-tugra.com.tr
sslev2.e-tugra.com.tr
evexpired.e-tugra.com.tr
ssldv.e-tugra.com.tr
sslev.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evtestrevoked.e-tugra.com.tr
evvalid.e-tugra.com.tr
sslev.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
*.e-tugra.com.tr
sslev2.e-tugra.com.tr
www.e-tugra.com.tr
evtest4.e-tugra.com.tr
evvalid.e-tugra.com.tr
evexpired.e-tugra.com.tr
*.e-tugra.com.tr
www.e-tugra.com.tr
*.e-tugra.com.tr
sslev2.e-tugra.com.tr
evtest2.e-tugra.com.tr
sslev2.e-tugra.com.tr

Certificate

The complete raw certificate details for portal.e-tugra.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwuL5pBmkV/up/pUCMQG
be/TW2ivmfid6o58sIbpCUehiPdTgIdUBfen/YGLMl4qc8gNRoJRe+7vfvXuH9IO
Fcy4w9qQI/Byj/NYhBizl/lA0MdFUBv154PPjrDrkFexS1EO+5J48/FElAVpkLLv
DjpbERvjmuwUFgTWQB9sgU4Nn4NR+xHljFkALpJMAA7D2J/Fz2pLh6lkJicyNAQM
jG64DXHpLmyoqR6c6+xd6L/d4LPd0K/dQEnpx2sLcCJYYimLsiE/BGsXCdI91o+H
RZ5LAehPs1dN6H209G8oH97kT+fKzmgoFlF4ZKihvLF9cKX4WTYkizGeMYRv6g6M
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87513654718441974480232291003358043459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E-Tugra TLS RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 11:00:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-16 11:00:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.e-tugra.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23612256813542987233255426817445655777990310965451667609173350634187520242966416138264242170731152425262015100276960295161520251523383346695193511893768911125952498856237420988384923893968678364675038344798978747202986043386738272629765251492077218352283250126815356314495903154685126019195936639163835498153007949159674519393655079468809046087113299514121530608238647776664784960563873827526177595074887900922293463434024561009135086398959232700830228305230784527543695464350588152430303119942466230876325212169682789109656752942179085432400696691580000985143177704271071367518268358874715515682782740196597154352169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00381cb317e99ae187fbbd7c646b9b6b35ac1299
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/ETugra-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.e-tugra.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.e-tugra.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/ETugra-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79602a02c50fe4098e6109a9c79379e2358abad8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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