dot.gov.ae

- Abu Dhabi Digital Authority -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:41:2d:88:6c:8e:c8:6d:1c:00:4b:5e:ad:0f:2b:8a was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Abu Dhabi Digital Authority

Organization: Abu Dhabi Digital Authority
Locality: Abu Dhabi
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:41:2d:88:6c:8e:c8:6d:1c:00:4b:5e:ad:0f:2b:8a
Serial Number (int): 16289158762283015548919075564581497738
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6c:a9:f7:c7:d2:69:ec:db:6a:c0:ac:09:c8:8c:ab:a9:4f:39:33:51
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 04:ae:6c:5b:f2:89:97:75:8d:8c:c6:9e:f1:31:53:c3:48:a7:04:38
Fingerprint (sha256): 69:e3:65:6c:8b:67:45:93:60:39:33:be:3f:1b:f9:8f:55:cf:69:9e:e6:9c:15:52:14:67:eb:df:c0:be:df:f7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate dot.gov.ae

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dot.gov.ae

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dot.gov.ae
dot.gov.abudhabi
itc.gov.abudhabi
dot.abudhabi.ae
www.dot.abudhabi.ae
www.itc.gov.abudhabi
www.dot.gov.ae
www.dot.gov.abudhabi

Other certificates including the domain name dot.gov.ae

(limited to 100 certificates)
maxservices.dot.gov.ae
dot.gov.ae
eprocurement.dot.gov.ae
maxservices.dot.gov.ae
maxservices.dot.gov.ae
itps.itc.gov.ae
watheq.itc.gov.ae
mail.dot.gov.ae
dot.gov.ae
eservices.dot.gov.ae
dot.gov.ae
maxservices.dot.gov.ae
eprocurement.dot.gov.ae
eprocurement.dot.gov.ae
mail.itc.gov.ae
eservices.dot.gov.ae
watheq.itc.gov.ae
dot.gov.ae
itps.itc.gov.ae
mail.itc.gov.ae

Certificate

The complete raw certificate details for dot.gov.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16289158762283015548919075564581497738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abu Dhabi Digital Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dot.gov.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618072710287466611732676843509130806584443763688320968403611459057017386904020639162262143333689110823998009048043591399647072280667031971019910543169913732982070729840151145376686603673608532410305907087936777040088389616558903849529032718173872222045000270913896578337117450168341784686471210010762660694810711029771408977750356976002312621110711690160478194234748466375200118767513849406330456125440692563732294911466266244316309687997925275350466820038849202344380649874666758279656166721875045688364222418511141534854686878205221041886696377423560696749607249132397857467461198826072917026226273183909710195841933574899532923121360230207527761421706268954544775640345301928060841877649902783524809418674865405345420804011257322891617079682064263162987955897559970051985237880386868795831750049184759214220986576715884543458548137563414578120410554355090919457678241554860990160535380371147221227226844222296241198781132292936037156679063279530036248246140895951373067528485892551837634267377013839469374738305915936570691225310458723816993465241035031507957538490064172319742145940778395908603421214861855527543058600903174850958815900675960111689133572787841588186650481700981534976836793104239741759814292062141580102678352341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ca9f7c7d269ecdb6ac0ac09c88caba94f393351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dot.abudhabi.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.abudhabi.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itc.gov.abudhabi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.gov.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dot.gov.abudhabi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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