*.rss.e-tugra.com.tr

Issued by E-Tugra TLS RSA SubCA R1

About this certificate

This digital certificate with serial number 2c:09:2b:30:19:d1:24:8f:1e:ac:8f:3e:69:6f:db:6c was issued on by E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.rss.e-tugra.com.tr

E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI

Organization: E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI
Country: TR

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:09:2b:30:19:d1:24:8f:1e:ac:8f:3e:69:6f:db:6c
Serial Number (int): 58533638440817832950061888419891501932
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 00:38:1c:b3:17:e9:9a:e1:87:fb:bd:7c:64:6b:9b:6b:35:ac:12:99

Fingerprint (sha1): 24:9a:a2:75:02:b5:e4:c8:2b:49:a2:1a:62:42:4b:a5:d1:82:9b:a6
Fingerprint (sha256): 67:b5:6a:a9:f1:51:e2:b7:0b:32:36:38:dc:8d:e6:5d:70:7d:66:f6:6c:5d:a7:c2:5a:84:c0:31:05:fb:1c:8d

Issuing Certificate URL: http://cert.ssl.com/ETugra-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/ETugra-TLS-I-RSA-R1.crl

Check the revocation status for certificate *.rss.e-tugra.com.tr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rss.e-tugra.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rss.e-tugra.com.tr
rss.e-tugra.com.tr

Other certificates including the domain name e-tugra.com.tr

(limited to 100 certificates)
www.e-tugra.com.tr
evtest2.e-tugra.com.tr
evvalid.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
*.e-tugra.com.tr
sslov.e-tugra.com.tr
evtest4.e-tugra.com.tr
evvalidecc.e-tugra.com.tr
crm.e-tugra.com.tr
evvalid.e-tugra.com.tr
sslev2.e-tugra.com.tr
evtest2.e-tugra.com.tr
evrevoked.e-tugra.com.tr
*.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
anket.e-tugra.com.tr
www.e-tugra.com.tr
evtest.e-tugra.com.tr
evtest4.e-tugra.com.tr
*.e-tugra.com.tr
crm.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest.e-tugra.com.tr
evtest2.e-tugra.com.tr
portal.e-tugra.com.tr
www.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
evtestrevoked.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
evtest2.e-tugra.com.tr
evvalidecc.e-tugra.com.tr
*.e-tugra.com.tr
evtest4.e-tugra.com.tr
www.e-tugra.com.tr
sanalpos.e-tugra.com.tr
e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
*.e-tugra.com.tr
www.e-tugra.com.tr
evtest.e-tugra.com.tr
sslev.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
evtest1.e-tugra.com.tr
sslev.e-tugra.com.tr
rss.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest.e-tugra.com.tr
e-tugra.com.tr
www.e-tugra.com.tr
mail.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest4.e-tugra.com.tr
evtest2.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
preodoo.e-tugra.com.tr
sslev2.e-tugra.com.tr
sslev2.e-tugra.com.tr
www.e-tugra.com.tr
*.rss.e-tugra.com.tr
preodoo.e-tugra.com.tr
sslev2.e-tugra.com.tr
evexpired.e-tugra.com.tr
ssldv.e-tugra.com.tr
sslev.e-tugra.com.tr
evtest2.e-tugra.com.tr
*.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
evtest2.e-tugra.com.tr
www.e-tugra.com.tr
evtestrevoked.e-tugra.com.tr
evvalid.e-tugra.com.tr
sslev.e-tugra.com.tr
evvalidrsa.e-tugra.com.tr
*.e-tugra.com.tr
sslev2.e-tugra.com.tr
www.e-tugra.com.tr
evtest4.e-tugra.com.tr
evvalid.e-tugra.com.tr
evexpired.e-tugra.com.tr
*.e-tugra.com.tr
www.e-tugra.com.tr
*.e-tugra.com.tr
sslev2.e-tugra.com.tr
evtest2.e-tugra.com.tr
sslev2.e-tugra.com.tr
*.e-tugra.com.tr

Certificate

The complete raw certificate details for *.rss.e-tugra.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ugaL1oTdEAyLN07/9qG
nfOsrVh5b5Rx7qYcsE+N/B805AMQHFizSs3bsW/6ckzlwErBAL/oLstfPQK4K+RM
K71Ogg0pCQr627x4AuN2EhzHRbVMclmu5rR0aCoPWmSo5AWzpH1FfyANqGbjj6Dh
HZHeRD4Z8pRQ6HY6ZlFHovtAp0VTnEk2wQDbfgUMNdSEooE82ZTIdCT8huq2jN2q
9kh0QU5+PeTJpX8taWoXnI/B59S8ylF2SrlmbAfrvewBdNwnM1yDWxorUJ68OSca
oRi9SJh6Nm8N0i1KOUU0dsuThFzGFUQN8mbpozhJUaQTb3db/PiAaOcIo2nk9BfF
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58533638440817832950061888419891501932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E-TUGRA EBG BILISIM TEKNOLOJILERI VE HIZMETLERI ANONIM SIRKETI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E-Tugra TLS RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 15:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 15:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rss.e-tugra.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26624497945376970464491844317193355607473554318593821392111819336257728802694658896785364258233801399727799342347834563792642603272485569373598580584286908653019209478902624319620890630072594226317766536513835957743180929905693804203983157519701583005794124750935300262726469535118960541098688149728227510997833229546543606329384970445255659228500379663963579802078834924068307461312371363824029924995514745958088310382005628817451298281038857521561176465101363608196015057230672126516684752619191657972571936394830235207236704399452951896591025163879130194494679902958883282140214013184165882407904160540460238488951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 00381cb317e99ae187fbbd7c646b9b6b35ac1299
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/ETugra-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rss.e-tugra.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.e-tugra.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/ETugra-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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