pna.shaparak.ir

- SHAPARAK -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:84:4c:fd:b8:71:fa:67:2c:79:d0:87:f5:af:86:28:8b was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SHAPARAK

Company registration number: 420013
Organization: SHAPARAK
Organization unit: IT DEPARTMENT
State / Province: TEHRAN
Locality: TEHRAN
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:84:4c:fd:b8:71:fa:67:2c:79:d0:87:f5:af:86:28:8b
Serial Number (int): 1492314036804382905980306877603887576393867
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 65:07:fb:eb:65:6a:21:71:cd:2b:81:98:d2:57:95:f0:05:b5:05:61
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): 20:67:e1:7b:44:55:2b:49:28:dc:6c:47:14:47:c2:32:e7:50:2e:a1
Fingerprint (sha256): 2f:2f:4e:1f:13:29:86:1c:dd:57:8b:15:e1:80:43:0e:e3:b9:ab:1f:78:60:54:f3:f0:d8:36:9b:6f:38:bc:4c


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate pna.shaparak.ir

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pna.shaparak.ir

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pna.shaparak.ir

Other certificates including the domain name shaparak.ir

(limited to 100 certificates)
hub.shaparak.ir
soha.shaparak.ir
ecd1.shaparak.ir
fcp.shaparak.ir
asan.shaparak.ir
fanava.shaparak.ir
kica.shaparak.ir
*.shaparak.ir
pec.shaparak.ir
bpm.shaparak.ir
sayan.shaparak.ir
mms.shaparak.ir
sepehr.shaparak.ir
bpm.shaparak.ir
pep.shaparak.ir
pep.shaparak.ir
pec.shaparak.ir
my.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
pna.shaparak.ir
asan.shaparak.ir
ikc.shaparak.ir
mms.shaparak.ir
bpm.shaparak.ir
www.shaparak.ir
bpm.shaparak.ir
hub.shaparak.ir
say.shaparak.ir
hub.shaparak.ir
sep.shaparak.ir
asan.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
shaparak.ir
pec.shaparak.ir
pec.shaparak.ir
pep.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
mail.shaparak.ir
mms.shaparak.ir
sep.shaparak.ir
ikc.shaparak.ir
sayan.shaparak.ir
pecco.shaparak.ir
say.shaparak.ir
sep.shaparak.ir
tsm.shaparak.ir
bpm.shaparak.ir
fcp.shaparak.ir
sepehr.shaparak.ir
omid.shaparak.ir
sayan.shaparak.ir
shaparak.ir
pna.shaparak.ir
bpm.shaparak.ir
sadad.shaparak.ir
pec.shaparak.ir
mms.shaparak.ir
360.shaparak.ir
bpm.shaparak.ir
sep2.shaparak.ir
fcp.shaparak.ir
mabna.shaparak.ir
ikc.shaparak.ir
ecd1.shaparak.ir
ecd1.shaparak.ir
mms.shaparak.ir
shaparak.ir
my.shaparak.ir
pec.shaparak.ir
pna.shaparak.ir
asanapp.shaparak.ir
ikc.shaparak.ir
bpm.shaparak.ir
fanava.shaparak.ir
sandbox.shaparak.ir
mail.shaparak.ir
sep.shaparak.ir
sadad.shaparak.ir
say.shaparak.ir
shaparak.ir
tsm.shaparak.ir
mail.shaparak.com
pep.shaparak.ir
pec.shaparak.ir
pecco.shaparak.ir
mabna.shaparak.ir
sep2.shaparak.ir
say.shaparak.ir
fcp.shaparak.ir
pep.shaparak.ir
sep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
my.shaparak.ir

Certificate

The complete raw certificate details for pna.shaparak.ir in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqG4rnAiBUBNGTZmcqUW
mf0TWdCSA3Jn9E8rapZG84f4xDgK5SJg8TvYyvCtQ59Cfi9OTxwKnxb6tc3Zu213
59F7rYwrqDjBXQlHBCPlZ2hvV0pczjz5VLwTB4xSyojjAVk4212E7wqL1Gda8jaW
x9gLs/GA5mA4zNZudRE6JeiChveIvHJ6uvEcBPK8eHxoufL2xjdm+yBPfrBJLeRQ
kIthl0KpLW3IhRFL4N9Gz/squuMR9uiYguvd+5TzEH1nJrxsSfZY+Z8pDiWc8JNd
4uBgOx0OZf+i7K3l8vSxdXe4zS/RI9DOC7DiBu8Fvb14L8JWp8ytaeaF8O99qJyH
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492314036804382905980306877603887576393867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 15:12:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 15:12:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '420013'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHAPARAK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pna.shaparak.ir'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26084838623364948866031479589018496872316876941611790403134480911368460738800058623062764673212313840673357578072424736204199279701471747941738942192017159288495743048386960905552825085586423664366510890930476056949331126128788284009330044859593986640037016501509337165458136539393934362060517751660214675721833537922930752612679894126119028570649598073357891220660449203498742250865505007657328676318600107059383724705107531725711679724267272836957730613346575454846905130176332996001174911485674398149575173740982615990066164679321758447447573205738553306997278739505666862496937779675470630018345878665055902140381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pna.shaparak.ir'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6507fbeb656a2171cd2b8198d25795f005b50561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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