mabna.shaparak.ir

- SHAPARAK ELECTRONIC CARD NETWORK PAYMENT CO. (PJS) -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:b9:62:fd:4c:07:c7:1f:ad:eb:fd:c4:89:8e:27:19:11 was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SHAPARAK ELECTRONIC CARD NETWORK PAYMENT CO. (PJS)

Company registration number: 10320718470
Organization: SHAPARAK ELECTRONIC CARD NETWORK PAYMENT CO. (PJS)
Organization unit: IT DEPARTEMENT
State / Province: Tehran
Locality: Tehran
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:b9:62:fd:4c:07:c7:1f:ad:eb:fd:c4:89:8e:27:19:11
Serial Number (int): 1492384600110100885332357666183120339540241
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: f2:e9:80:8c:4c:71:d4:f5:df:e5:71:68:0f:6e:38:d8:6c:14:72:91
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): b8:5a:11:d0:24:3c:04:5b:7b:41:10:91:c1:b3:5f:74:3a:a8:3d:ec
Fingerprint (sha256): 62:27:e1:5c:d6:ad:57:2d:35:05:78:93:3d:dc:b2:b6:9b:99:d9:db:93:82:a3:ab:b9:20:45:2b:66:46:a1:68


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate mabna.shaparak.ir

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mabna.shaparak.ir

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mabna.shaparak.ir

Other certificates including the domain name shaparak.ir

(limited to 100 certificates)
hub.shaparak.ir
soha.shaparak.ir
ecd1.shaparak.ir
fcp.shaparak.ir
asan.shaparak.ir
fanava.shaparak.ir
kica.shaparak.ir
*.shaparak.ir
pec.shaparak.ir
bpm.shaparak.ir
sayan.shaparak.ir
mms.shaparak.ir
sepehr.shaparak.ir
bpm.shaparak.ir
pep.shaparak.ir
pep.shaparak.ir
pec.shaparak.ir
my.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
pna.shaparak.ir
asan.shaparak.ir
ikc.shaparak.ir
mms.shaparak.ir
bpm.shaparak.ir
www.shaparak.ir
bpm.shaparak.ir
hub.shaparak.ir
say.shaparak.ir
hub.shaparak.ir
sep.shaparak.ir
asan.shaparak.ir
pep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
shaparak.ir
pec.shaparak.ir
pec.shaparak.ir
pep.shaparak.ir
pna.shaparak.ir
sadad.shaparak.ir
mail.shaparak.ir
mms.shaparak.ir
sep.shaparak.ir
ikc.shaparak.ir
sayan.shaparak.ir
pecco.shaparak.ir
say.shaparak.ir
sep.shaparak.ir
tsm.shaparak.ir
bpm.shaparak.ir
fcp.shaparak.ir
sepehr.shaparak.ir
omid.shaparak.ir
sayan.shaparak.ir
shaparak.ir
pna.shaparak.ir
bpm.shaparak.ir
sadad.shaparak.ir
pec.shaparak.ir
mms.shaparak.ir
360.shaparak.ir
bpm.shaparak.ir
sep2.shaparak.ir
fcp.shaparak.ir
mabna.shaparak.ir
ikc.shaparak.ir
ecd1.shaparak.ir
ecd1.shaparak.ir
mms.shaparak.ir
shaparak.ir
my.shaparak.ir
pec.shaparak.ir
pna.shaparak.ir
asanapp.shaparak.ir
ikc.shaparak.ir
bpm.shaparak.ir
fanava.shaparak.ir
sandbox.shaparak.ir
mail.shaparak.ir
sep.shaparak.ir
sadad.shaparak.ir
say.shaparak.ir
shaparak.ir
tsm.shaparak.ir
mail.shaparak.com
pep.shaparak.ir
pec.shaparak.ir
pecco.shaparak.ir
mabna.shaparak.ir
sep2.shaparak.ir
say.shaparak.ir
fcp.shaparak.ir
pep.shaparak.ir
sep.shaparak.ir
ecd.shaparak.ir
soha.shaparak.ir
my.shaparak.ir

Certificate

The complete raw certificate details for mabna.shaparak.ir in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JFZOBtyeNJ9xZzLhsrY
LF84d8nJZLsiCtoCPzgWYj1NZfCz6XT9U2TKY+b/WVJY2OiYEi9BLNxEAUd6owfy
cETu0JSMzIxPk46JXp+ffwcFkk9fVgapu7jTcsvUM9Dx58pAJ/6wi5IVlAhZfgE8
uYxHWtSERlcltMDPjxgbrZUK+FICeGjg4ebyJypC9jbK9CxWpkPlEatxl85Hmpxp
jQsPdGgO0gGCALmpQElUdUxpuh3Glx5gLs54VOPto40hb7ztvBncL4YCDLlRlK4P
eiHTfZgrvnwRC5TCAwYpiaPievAoKKHr9LZbzKo/cIb49xK4q4i73PLsDSAGc6uM
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492384600110100885332357666183120339540241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-05 13:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-05 13:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10320718470'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tehran'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tehran'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHAPARAK ELECTRONIC CARD NETWORK PAYMENT CO. (PJS)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mabna.shaparak.ir'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30368867214635154507082560836046882010759178907658401471130097852891295880027981583155131225810684695960426953865202339845448369324095320113522407198904388516604955648934105662501952407706255868817917519658876770392034377115553290178517373791777656038597309722887546071606486430330443736679128203283937123079283795987829641109650734455495036000332320027877191850079356850749300849337046805560967386879238444661995370405382093188111821146474138344757197625976099617443748005549172178257317609509868943019068117019447774127711697992057414843873819612271462257546775709630404245620818205688094491809965280741280149376187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mabna.shaparak.ir'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2e9808c4c71d4f5dfe571680f6e38d86c147291
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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