darb.itc.gov.ae

- Abu Dhabi Digital Authority -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:ce:9e:a4:0d:60:e6:66:ea:b2:8a:87:8b:6a:69:f0 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Abu Dhabi Digital Authority

Organization: Abu Dhabi Digital Authority
Locality: Abu Dhabi
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ce:9e:a4:0d:60:e6:66:ea:b2:8a:87:8b:6a:69:f0
Serial Number (int): 21011250707908391937443914851396774384
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:35:6f:7d:bd:8d:eb:07:8a:fe:89:b4:3e:c8:c1:ae:fd:81:ee:4e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a2:d5:73:2c:3d:02:c1:be:d1:8a:34:09:73:58:cf:7d:6e:ea:55:80
Fingerprint (sha256): 32:47:08:37:e8:39:1c:db:ad:93:68:5c:ba:b5:be:51:e2:d7:1b:06:b8:c7:1c:78:40:71:ea:e5:ae:03:33:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate darb.itc.gov.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for darb.itc.gov.ae

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

darb.itc.gov.ae
beta.darb.itc.gov.ae

Other certificates including the domain name itc.gov.ae

(limited to 100 certificates)
adtaxi.itc.gov.ae
adda.gov.ae
adtaxi.itc.gov.ae
adda.gov.ae
maxservices.dot.gov.ae
darb.itc.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
maxservices.dot.gov.ae
adda.gov.ae
darb.itc.gov.ae
adda.gov.ae
*.itc.gov.ae
*.itc.gov.ae
adtaxi.itc.gov.ae
frm.itc.gov.ae
itps.itc.gov.ae
adda.gov.ae
itps.itc.gov.ae
watheq.itc.gov.ae
adda.gov.ae
adda.gov.ae
mail.dot.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
les.itc.gov.abudhabi
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
frm.itc.gov.ae
salama.itc.gov.ae
adda.gov.ae
admobility.gov.ae
adda.gov.ae
iavmep.itc.gov.ae
*.itc.gov.ae
salama.itc.gov.ae
itc.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
adda.gov.ae
mail.itc.gov.ae
adda.gov.ae
toll.itc.gov.ae
adda.gov.ae
aviationgrievance.itc.gov.ae
toll.itc.gov.ae
watheq.itc.gov.ae
admobility.gov.ae
itps.itc.gov.ae
salama.itc.gov.ae
itc.gov.ae
mail.itc.gov.ae
adda.gov.ae
adda.gov.ae

Certificate

The complete raw certificate details for darb.itc.gov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21011250707908391937443914851396774384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi Digital Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'darb.itc.gov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927817921919672167254721686517970671526283309572229762380530062104927117412420959390942002512161894147789557551333430578807353559191024842367073223545280673509757493036486589256107961187048920108262760624878579081490792654319496789634023403781745425515144899541596621654306073079945640276966776778611782222386361689023465575092125968761970553518507100775307468261651620618311012816454431836466974585657003149096106054112400488308666833441862179130338520391400862112865593093878062203236574715040344848681699487780626520575084271095939891155485557660446965058676441112335714422039162734335821606835803902683666747632989477657164865011835939581059832010623627491307975243961630102453632068986847800521870753289782881619795514238983397270952519943203770120118180171717538770340269946626506374855492226918620113023445547888708869198938517589663210582542222268271426605234652633440532097950873002346450695844166016627266876240022316473845159614315822841158021803661418040378911079988700400166006178692886510199751502303429905661750588488159229060489734735589116887693282666226697308713923718917020593902863956175932317511011688801753191646272014338983085132408177679284952215711723552828455755432784421646632716596022116982769954906141781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab356f7dbd8deb078afe89b43ec8c1aefd81ee4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darb.itc.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.darb.itc.gov.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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