snailhouse.com.tw

- Z-Strength Ltd.Co. -

Issued by TWCA Secure SSL Certification Authority

About this certificate

This digital certificate with serial number 47:e2:00:00:00:01:2e:b0:6c:d1:43:23:bc:b9:08:79 was issued on by TAIWAN-CA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Z-Strength Ltd.Co.

Organization: Z-Strength Ltd.Co.
Organization unit: system
State / Province: TAIWAN
Locality: TAIPEI
Country: TW

TAIWAN-CA

Organization: TAIWAN-CA
Organization unit: Secure SSL Sub-CA
Country: TW

This certificate has expire since

Certificate Details

Serial Number (hex): 47:e2:00:00:00:01:2e:b0:6c:d1:43:23:bc:b9:08:79
Serial Number (int): 95548646790759327429364099303041730681
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f6:4e:fc:ea:4e:28:c6:23:41:3a:49:82:ec:7b:e0:2f:1a:7f:60:17:44:cc:8a:26:4e:08:f5:30:52:ea:5d:63
AuthorityKeyId: f8:07:c2:68:24:ff:85:95:cb:db:1e:e3:33:9c:2a:4f:97:20:56:7b

Fingerprint (sha1): 25:d4:a8:3b:20:a8:83:3b:fc:b8:cd:fc:22:b9:b8:ac:15:f2:c4:21
Fingerprint (sha256): 3c:97:71:50:63:ea:a8:28:10:a9:8e:80:69:67:e3:da:7e:f1:99:13:c6:86:5d:d3:e3:da:de:bb:e5:34:5d:13

Issuing Certificate URL: http://sslserver.twca.com.tw/cacert/secure_sha2_2014.crt

Revocation information

OCSP Server: http://twcasslocsp.twca.com.tw/
CRL Distribution Point: http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2014.crl

Check the revocation status for certificate snailhouse.com.tw

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for snailhouse.com.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snailhouse.com.tw
office.snailhouse.com.tw
home.snailhouse.com.tw
newhouse.snailhouse.com.tw
admin.snailhouse.com.tw

Other certificates including the domain name snailhouse.com.tw

(limited to 100 certificates)
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw
snailhouse.com.tw

Certificate

The complete raw certificate details for snailhouse.com.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJhYjBfHSnMezgbpXKUj
yD081pHLn0Kgs8XjckB1G/Wy0iyNud1JZLTRfh8w4RO1Ligqoo0n+4kun8+7pgH3
EiLLlGpLIPflnZM0/mcJPSUN5n39ucrGA5Af2oGEhnAiEJ676dNPpCJBJw7FDoML
/dUpSowOkl2uF9xIRbd0RRzG1bE9OGZoJQlocpzVAbctyrRwg3mwJT2ZMJ60f1vB
7GwNUILI8W3KAV8oLsjVdD+gZAHPoch0KUa4o2gFgtbOgN/PyNHZRaAFQUboI1Dn
0jVivYc9wFZksgc7/7eBOArNBP2YSODa/H1g/YjzByVY40Bo9keBPpJ7wgcrfJXv
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95548646790759327429364099303041730681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure SSL Sub-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TWCA Secure SSL Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 09:06:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIPEI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Z-Strength Ltd.Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'system'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'snailhouse.com.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25322785550341431189468668552419593300956219724519542070812006550176597231056912730195374589512589532861677550752827449366505215630997379043784223794962836767710101550379994333702795635048068129937188587549369815810579287714482002860831736840155552818058525956246286013833659110802451294486077457412487239961460440675417018809118266599609210977430533312888826134418089039059217091594712470721874434272744631756981478523890259938238429997221892235673539359683631738282707548776549319210772495748321830509148151285336315686136565653574309601243619848957869057406600122431597109139681655585969989367321727842307982880711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f807c26824ff8595cbdb1ee3339c2a4f9720567b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
							f64efcea4e28c623413a4982ec7be02f1a7f601744cc8a264e08f53052ea5d63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2014.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailhouse.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.snailhouse.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.snailhouse.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhouse.snailhouse.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.snailhouse.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/cacert/secure_sha2_2014.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://twcasslocsp.twca.com.tw/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.40869.1.1.25
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'www.twca.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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