OV SSL/TLS Certificate for www.dot.gov.tw Issued to 政府機關-財政部賦稅署

Certificate is witin its validity period

Issued by Chunghwa Telecom Co., Ltd. (HiPKI OV TLS CA - G1)

About the www.dot.gov.tw OV SSL/TLS Certificate

This certificate with serial number 42:63:72:e7:bd:9a:e7:82:72:d3:5c:b8:4e:12:94:d0 for www.dot.gov.tw was issued on Thursday Apr 10, 2025 at 6:48AM by Chunghwa Telecom Co., Ltd..

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.dot.gov.tw provides you with the detailed information you were looking for.

We have identified some issues with this certificate:

Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Chunghwa Telecom Co., Ltd.

Organization: Chunghwa Telecom Co., Ltd.

Country: TW

This X.509 certificate will expire on Tuesday Mar 10, 2026 at 4:00PM UTC

Certificate Details

Serial Number (hex): 42:63:72:e7:bd:9a:e7:82:72:d3:5c:b8:4e:12:94:d0
Serial Number (int): 88245415665879687337829301449632421072
Serial Number Length: 127 bits, 16 octets

Subject Key Identifier: c1:55:09:80:49:40:39:d8:40:91:38:62:47:7c:c8:be:f5:e8:28:77
Authority Key Identifier: 35:8f:c2:2e:88:de:33:13:db:0e:21:63:ce:54:2e:b6:82:4c:a5:83

Fingerprint (SHA-1): 9a:ed:79:cb:2f:ff:87:97:e5:5c:31:55:9c:07:2a:24:a0:6f:52:eb
Fingerprint (SHA-256): bb:1d:a6:0b:41:e6:a4:5d:ae:11:23:75:4b:ce:b1:4d:55:cb:84:25:38:b5:61:20:07:4a:c6:95:71:04:fc:07

Issuing Certificate URL: http://tls.hinet.net/certs/OVCA-G1.crt

Revocation Information

OCSP Server: http://ocsp.tls.hinet.net/OCSP
CRL Distribution Point: http://repository.tls.hinet.net/crl/OVCA-complete.crl

Check the revocation status for certificate www.dot.gov.tw

DNS Names

Email Addresses

IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.dot.gov.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Key Encipherment
Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dot.gov.tw

X.509 Certificate

The complete raw X.509 certificate details for www.dot.gov.tw in PEM and ASN.1 format.

Certificate (PEM)

Public Key (PEM)

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88245415665879687337829301449632421072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chunghwa Telecom Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HiPKI OV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-10 06:48:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-10 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '臺北市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '政府機關-財政部賦稅署'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.dot.gov.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18786695432219829343663543761351249954295392670187094296651448263582037430192369785024102147749394152696490017897914220543088900462678464118844639832118071833635843392707583805590299719354518323861905717018570107784216532028274692501162822765524905358785522164288504896526602667318799198979938739192146264762218107982257901137562038849976395530893902889441225776679842864609083649744256319190578854545606218686433123928247402547157884002184661056130658444793762256575419472318799600298510555515480427583292409667704044298022114410293528621564559992545940406854769360782028605727287413612449655154589208438495225761029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 358fc22e88de3313db0e2163ce542eb6824ca583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1550980494039d840913862477cc8bef5e82877
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.tls.hinet.net/crl/OVCA-complete.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tls.hinet.net/certs/OVCA-G1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tls.hinet.net/OCSP'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23459.200.0.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.gov.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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