sfek.kz

Issued by WoSign CA Free SSL Certificate G2

About this certificate

This digital certificate with serial number 31:8f:99:67:c4:06:ee:fb:fc:20:f3:8c:c3:50:80:b7 was issued on by WoSign CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=sfek.kz

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 31:8f:99:67:c4:06:ee:fb:fc:20:f3:8c:c3:50:80:b7
Serial Number (int): 65877781674068899849392838397763027127
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a7:05:97:a5:b9:50:02:fb:5a:4c:0d:95:c4:56:a0:d6:72:84:e8:43
AuthorityKeyId: d2:a7:16:20:7c:af:d9:95:9e:eb:43:0a:19:f2:e0:b9:74:0e:a8:c7

Fingerprint (sha1): 8d:4d:4c:21:28:f2:36:23:e1:8e:99:ba:32:8d:c6:60:c8:c3:ed:d6
Fingerprint (sha256): 46:b0:72:74:d9:cc:08:1e:55:98:52:50:5c:12:ab:39:48:ce:4f:dd:5c:56:de:a5:93:8e:2f:ec:3a:4c:05:28

Issuing Certificate URL: http://aia1.wosign.com/ca6.server1.free.cer

Revocation information

OCSP Server: http://ocsp1.wosign.com/ca6/server1/free
CRL Distribution Point: http://crls1.wosign.com/ca6-server1-free.crl

Check the revocation status for certificate sfek.kz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfek.kz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfek.kz
www.sfek.kz

Other certificates including the domain name sfek.kz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sfek.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIQMY+ZZ8QG7vv8IPOMw1CAtzANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxKjAoBgNV
BAMTIVdvU2lnbiBDQSBGcmVlIFNTTCBDZXJ0aWZpY2F0ZSBHMjAeFw0xNTExMjAx
NDM5MTdaFw0xNjExMjAxNDM5MTdaMBIxEDAOBgNVBAMMB3NmZWsua3owggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAmZWle6TYU4M65RxdxCOEJDq8l/9o
UwNLXlwzK2/bIECwJh/rqUWAVZ4ctu3Ij4eagxBFNihOSnp1bunBQw9nsX2xPBv7
AuAGFWalIuHU9W8icYKt22v0gzK+0ek0jBuShctlKIC0xv1jMyLgzZkGGVS7QYbP
4coHb6J3OFu4fWA5BRn15jU/N+s0b2XBRhgoq33P7gurumoXNpzvSrIHBAIPJS24
N7fzA8ZAcWahNVFDfh6lztRbLOf1ubwTqdb5bB2WTqJ/OqAf+RZeUQc3+BJ9ZZBL
QCbCgy5K/U29Zu6kewxQ0zwnazNI8n3R0e/6d0gHWPlaA4s4tccqM4yHDEHWfXsn
RIfkXxytD4qn1yhQvANCSWBDrNvWte+NntDLXnFADNYh/03wXmEvlIB5chawDqsF
V31AJkKSD39cGSkLGxyQV6c9EDlz5LKBqTVIU06WR9wqVFkMUhqRQS6FOt5KhyG9
IHd30Sx/y21+TqcvtFpcOOmbywjxHeRBxSSo7q1AQ7fXFsb5wXDSyJkfs2IITQFZ
R4rnfilKZqPUnPeCMQ8o8oELD0ekHQbzcJKD17Qm/fDW2bib7zafHPuSw8CLDLJ2
biU+obseSvKyzQ+HYKW8PbYDQcgLAAinVqa5bWEJWqzRpEpLE4Vy6+TbJAgW22Jj
6h+4e1PhpT8xywIDAQABo4IBrTCCAakwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBSnBZeluVAC
+1pMDZXEVqDWcoToQzAfBgNVHSMEGDAWgBTSpxYgfK/ZlZ7rQwoZ8uC5dA6oxzB9
BggrBgEFBQcBAQRxMG8wNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwMS53b3NpZ24u
Y29tL2NhNi9zZXJ2ZXIxL2ZyZWUwNwYIKwYBBQUHMAKGK2h0dHA6Ly9haWExLndv
c2lnbi5jb20vY2E2LnNlcnZlcjEuZnJlZS5jZXIwPQYDVR0fBDYwNDAyoDCgLoYs
aHR0cDovL2NybHMxLndvc2lnbi5jb20vY2E2LXNlcnZlcjEtZnJlZS5jcmwwHwYD
VR0RBBgwFoIHc2Zlay5reoILd3d3LnNmZWsua3owUQYDVR0gBEowSDAIBgZngQwB
AgEwPAYNKwYBBAGCm1EGAQICATArMCkGCCsGAQUFBwIBFh1odHRwOi8vd3d3Lndv
c2lnbi5jb20vcG9saWN5LzANBgkqhkiG9w0BAQsFAAOCAQEAIF8BlgsQSTAXOF5T
T2fEyUPjpdSqlc0KNXK+AB7j/AwTjjpI/3I4gZ0ABoAvHmzqFNs1cttAX8KL3bg/
VmhR0/PLzNqXmhgGUc0sr07ontK7sY3ZFoExVg4kce+MAKtvD5A+mF8KasoPboYx
6WNnam55zvmIJJ/5YqSyH6JFntQyFLKbirCkfWrG1uP3DSxl4YFfsUBWqoeXxJyq
hSPKFlRDUnWzpVwp+UCwDHSp/XyvmMgL+lva+4OpTsIoPdr+35uUYzfO8d5Ku+ko
1jz6omPhqM+TA04lK1Cq/LobeUo5IB52fwwzXE82H4mlDqpot6KRM6y5zfoDrgn4
C9Fscw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65877781674068899849392838397763027127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-20 14:39:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-20 14:39:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sfek.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785739201388497885100727153133194817496540252031715469767860187887104737203881205724013724971194421012043528040631663717635683534258794248315577937315010795516456765089859960000883158316550817166598264786264982153245949733283659396206000008970198436236253749600209850963734596018438680502889752187160777874664848731714613146668553697052541207519577156451908321530251049072116329723220553341315659324511869332301172639466417091967975498095803034018296192468343969112018406601659274045083373055529966974380729357684435537487496751244077598142931147656223344268197677714519645513612258728393855709225857954772019047652000189829816779164180025960283989923945588520168813387255894809171763015692280823400318361036621178417157318469869557664623866984783481416358087124948866662774148595992563070030458003927790428166773773744780005455197546760626661364168665692503089666938049269528765407962687308125593872801124120241778542462557173397180440642405769890764282977995795754633780122285125082253730166196918870994231407362340064381969818894751393309964402526021292159650174214034544874953405107956594741268269904549957846424154211727248449135539268334730105832932148837125277239052055858101624378777410294044338599285717024128368437150822859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a70597a5b95002fb5a4c0d95c456a0d67284e843
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2a716207cafd9959eeb430a19f2e0b9740ea8c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca6/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca6.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca6-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfek.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfek.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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