www.tcf.org.pk

- The Citizens Foundation -

Issued by GeoTrust Extended Validation SSL CA

About this certificate

This digital certificate with serial number 66:fd was issued on by GeoTrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Citizens Foundation

Company registration number: 0037144
Organization: The Citizens Foundation
State / Province: Sindh
Locality: Karachi
Country: PK

GeoTrust Inc

Organization: GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:fd
Serial Number (int): 26365
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18

Fingerprint (sha1): 2e:3d:95:3f:33:ff:12:4f:ee:10:30:3a:66:11:23:b0:04:10:77:93
Fingerprint (sha256): 4a:ac:36:96:9a:c3:5e:ca:53:67:55:7a:5b:d2:2c:37:c2:ac:a4:aa:22:68:9b:14:b6:af:ee:87:be:7c:b3:99

Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt

Revocation information

OCSP Server: http://EVSSL-ocsp.geotrust.com
CRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl

Check the revocation status for certificate www.tcf.org.pk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tcf.org.pk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tcf.org.pk

Other certificates including the domain name tcf.org.pk

(limited to 100 certificates)
au.tcf.org.pk
tcf.org.pk
support.tcf.org.pk
*.tcf.org.pk
tcf.org.pk
tcf.org.pk
www.tcf.org.pk
tcf.org.pk
portal.tcf.org.pk
no.tcf.org.pk
tcf.org.pk
hcm.tcf.org.pk
*.tcf.org.pk
link.tcf.org.pk
www.tcf.org.pk
careers.tcf.org.pk
www.tcf.org.pk
uk.tcf.org.pk
link.tcf.org.pk
link.tcf.org.pk
no.tcf.org.pk
support.tcf.org.pk
no.tcf.org.pk
support.tcf.org.pk
www.tcf.org.pk
*.tcf.org.pk
tcf.org.pk
link.tcf.org.pk
uk.tcf.org.pk
uk.tcf.org.pk
tcf.org.pk
tcf.org.pk
portal.tcf.org.pk
*.tcf.org.pk
tcf.org.pk
www.tcf.org.pk
www.tcf.org.pk
careers.tcf.org.pk
uk.tcf.org.pk
www.tcf.org.pk
support.tcf.org.pk
careers.tcf.org.pk
careers.tcf.org.pk
tcf.org.pk
link.tcf.org.pk
portal.tcf.org.pk
link.tcf.org.pk
link.tcf.org.pk
tcf.org.pk
link.tcf.org.pk
careers.tcf.org.pk
au.tcf.org.pk
www.tcf.org.pk
au.tcf.org.pk
www.tcf.org.pk
tcf.org.pk
link.tcf.org.pk
link.tcf.org.pk
uk.tcf.org.pk
support.tcf.org.pk
www.tcf.org.pk
www.tcf.org.pk
au.tcf.org.pk
tcf.org.pk

Certificate

The complete raw certificate details for www.tcf.org.pk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSfMCWpRq20te/lRKz6A
unZ9Bz5sTi+5ivysXm5jEkcB1s5RboI6Qy927FjrzWAKznjqlgA9fyd/1z0BN6gZ
X9Zns1/PbXVVvfDRYjEHsK/l7Y4PGbDzVgsYB8nd9YpKLmKVCctZnWfe2G4gPomk
xzd8pKV6hEJ9TuimRERSc+rFdwtZF/vEjCG3jRm3gf0BrtVwmB1P5qJDFT1cVnQZ
cbIi9e7EpD027qFcw030IkwdzEHDb8W6qztZpg3Vzq8SecFfLSxS7JyoMZ2cVtlD
G0x1fNmo+SH0LFMwKSduXiHjRZIwiYDgrgQDtE/NV7xCIwlrhk0fZ2KoysncTeuB
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-22 19:47:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-24 05:52:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0037144'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sindh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karachi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Citizens Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tcf.org.pk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22868757840181317006390514673571156702242194223056561630496177084519079662830900804242325877090990964043086917589908778647737404349597876089464683196451388111600088556813166850552878300479849144752584919291537086866893717423574370865656071718318478009538581192344722609503418697492331818558244704786666162815612253498146775111848153847403325859410912037298160509258435774307791071442027744186938173182963090069413338172444276056104897109557215734725585364091557816600076374314604453854626876465757285521988402728478061736382887111997816223409642135290188639966598626070914339402239724810549506026682107128112973840729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcf.org.pk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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