*.hdfcfund.com

- HDFC Asset Management Company Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:52:16:bb:7d:cf:bc:93:26:7a:b0:96:04:1f:e6:8c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HDFC Asset Management Company Limited

Organization: HDFC Asset Management Company Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:52:16:bb:7d:cf:bc:93:26:7a:b0:96:04:1f:e6:8c
Serial Number (int): 13718509367863449490429270971373315724
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:25:78:4b:b3:b8:e7:3c:b7:ce:2e:1b:4f:1f:5c:4e:de:dd:41:2c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 9e:c1:ed:8e:48:ae:7a:ff:a3:9d:73:75:16:80:2d:9d:88:99:2a:ee
Fingerprint (sha256): 62:7b:1d:d0:19:27:13:79:35:10:75:b9:82:a0:8b:b8:77:f5:f0:e2:f2:95:06:07:7c:d8:3d:78:24:54:37:21

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.hdfcfund.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hdfcfund.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hdfcfund.com
hdfcfund.com

Other certificates including the domain name hdfcfund.com

(limited to 100 certificates)
elearn.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
beta-distributor.hdfcfund.com
elearn.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
amcoeuat.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
pms.hdfcfund.com
sni.cloudflaressl.com
ekyc.hdfcfund.com
elearn.hdfcfund.com
beta-api.hdfcfund.com
mft1.hdfcfund.com
mpower.hdfcfund.com
beta-api.hdfcfund.com
*.hdfcfund.com
ssl631739.cloudflaressl.com
sni.cloudflaressl.com
humanresource.thepawscuers.life
ssl631741.cloudflaressl.com
ssl631741.cloudflaressl.com
servicedesk.celestialsys.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
api.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
sharedealing.hdfcfund.com
web.hdfcfund.com
ssl631740.cloudflaressl.com
sni.cloudflaressl.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
uatdistributor.hdfcfund.com
prisma.hdfcfund.com
investor.hdfcfund.com
elearn.hdfcfund.com
servicedesk.celestialsys.com
elearn.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
vision.hdfcfund.com
pms.hdfcfund.com
gitlab.hdfcfund.com
distributor.hdfcfund.com
sni.cloudflaressl.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com
*.hdfcfund.com
sni174955.cloudflaressl.com
gitlab.hdfcfund.com
ssl631739.cloudflaressl.com
elearn.hdfcfund.com
hdfcfund.com
*.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
sni.cloudflaressl.com
investor.hdfcfund.com
gtac.plintron.in
pms.hdfcfund.com
ekyc.hdfcfund.com
*.hdfcfund.com
elearn.hdfcfund.com
ssl631739.cloudflaressl.com
investor.hdfcfund.com
*.hdfcfund.com
pms.hdfcfund.com
api.hdfcfund.com
sni.cloudflaressl.com
elearn.hdfcfund.com
investor.hdfcfund.com
sni.cloudflaressl.com
beta-api.hdfcfund.com
elearn.hdfcfund.com
elearn.hdfcfund.com
ssl631741.cloudflaressl.com
elearn.hdfcfund.com
uat-investor.hdfcfund.com
distributor.hdfcfund.com
elearn.hdfcfund.com
*.hdfcfund.com
sni.cloudflaressl.com
itcare.hdfcfund.com
ssl631740.cloudflaressl.com
servicedesk.celestialsys.com
ssl631740.cloudflaressl.com
beta-investor.hdfcfund.com
ssl631740.cloudflaressl.com
elearn.hdfcfund.com

Certificate

The complete raw certificate details for *.hdfcfund.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx00NkbNo8N8mMgukGLU1
9DbBloyDwDALCvL4UY55E6eDbAPRhLzwxccFw0rbECg0Ub3yTJmQYs/lx7LUe2hD
Dp1PIUIjplnLZdnjn1rqBfGZ0M9NTJ0eHPgoTKJYMpc6Ub45hTBwekGrTdthppp/
paKUwfzFhHLWoDPBYGwDTVmDRNW2sh5lXFAUVozpxfjwkur+KPFl4wD/V/b0U8fp
V85KgksgzFdbqtXpdOabODBjZfE1pp+UW91QSAtsHg+XGDauLBmCmA8fRF68f5Rx
4nFSf3YUSRF1Kx7N+cdtXIUHQk5i6A2ey9oO9MoLJp6ddpDjRRMnfbfq0R2hJfNf
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13718509367863449490429270971373315724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HDFC Asset Management Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hdfcfund.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25159418940888604996747497453140838162682245669912906662001701372743927937045325737892189362337880490660580827503930893702729775517649992686099918982611007491840107479852690752270640273718478761325643970541049974889971685451920254326525512664172281772561097388136403627444399845079661960815821141069600641810132562490449995198037297106730799039748261982083855862757779722159872634583250099473385902822327801343431214743774817837752954966321431819563808704613437240325415656280088680772756940171795959526003938124698785541322875962817909672762142081199696995859198017029228908186706910331570798264530440339829099290501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a25784bb3b8e73cb7ce2e1b4f1f5c4ededd412c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdfcfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdfcfund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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