www.taqa.com.eg

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 07:11:58 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.taqa.com.eg,OU=GT38139771+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:11:58
Serial Number (int): 463192
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 4e:08:57:9c:c7:6e:74:34:3d:50:41:82:06:c4:df:7b:6d:d9:5f:06
Fingerprint (sha256): 73:95:a7:61:db:f2:c1:ee:a0:2a:34:57:7d:bd:28:2e:c5:61:a2:5b:2a:bf:5d:14:a0:00:db:6c:50:36:a4:20

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate www.taqa.com.eg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.taqa.com.eg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.taqa.com.eg
taqa.com.eg

Other certificates including the domain name taqa.com.eg

(limited to 100 certificates)
www.taqa.com.eg
www.taqa.com.eg
itsd.taqa.com.eg
*.taqa.com.eg
servicedesk.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
fadaaweb.com
www.taqa.com.eg
ithelpdesk.cwc.com
itservices.luminuseducation.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
fawryservice.taqa.com.eg
helpdesk.ineosphenol.net
support.edita.com.eg
www.taqa.com.eg
mesa.aylsoluciones.pw
servicedesk.buhaleeba.ae
servicedesk.buhaleeba.ae
helpdesk.northwestradiology.com
fadaaweb.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
fawryservice.taqa.com.eg
helpdesk.ineosphenol.net
itsd.taqa.com.eg
helpdesk.ineosphenol.net
www.taqa.com.eg
www.taqa.com.eg
helpdesk.ineosphenol.net
*.taqa.com.eg
fadaaweb.com
servicedesk.stjulians.com
servicedesk.newstory.com
www.taqa.com.eg
www.taqa.com.eg
*.taqa.com.eg
fawryservice.taqa.com.eg
helpdesk.ineosphenol.net
*.taqa.com.eg
ithelpdesk.cwc.com
sdesk.zaotechsystems.com
helpdesk.floridadistillers.com
pplhelpdesk.provlib.org
www.taqa.com.eg
servicedesk.newstory.com
support.edita.com.eg
helpdesk.ineosphenol.net
support.edita.com.eg
hdesk.amfarconsulting.com
www.taqa.com.eg
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
www.taqa.com.eg
www.taqa.com.eg
fawryservice.taqa.com.eg
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
pplhelpdesk.provlib.org
www.taqa.com.eg
www.taqa.com.eg
itservices.luminuseducation.com
pplhelpdesk.provlib.org
helpdesk.ineosphenol.net
www.taqa.com.eg
helpdesk.ineosphenol.net
sdesk.zaotechsystems.com
hdesk.amfarconsulting.com
itsd.taqa.com.eg
helpdesk.ineosphenol.net
helpdesk.floridadistillers.com
helpdesk.ineosphenol.net
servicedesk.buhaleeba.ae
www.taqa.com.eg
helpdesk.sam-dinesh.com
sdesk.zaotechsystems.com
fawryservice.taqa.com.eg
helpdesk.floridadistillers.com
www.taqa.com.eg
www.taqa.com.eg
servicedesk.stjulians.com
pplhelpdesk.provlib.org
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
sni.cloudflaressl.com
servicedesk.stjulians.com
www.taqa.com.eg
www.taqa.com.eg
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
www.taqa.com.eg
www.taqa.com.eg
helpdesk.ineosphenol.net

Certificate

The complete raw certificate details for www.taqa.com.eg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WOjcubIaiqawHWrgQ9a
/Y+yTNIKL5EMurIe3eKVFA520cgb53uiO/fnwq0v51f1DsMVP+FGyvYvOoWjCNld
Gldxz+TWaXz4K+CyMWWf51oZ2w3zsiIenwkbtIuaDl4WWVKVbvCr/1qs/no6oMuH
0Q7XXvMwTgNlwAIGU/7AKTYj93j16/j2DinVxxdlJD4B52P0MKFvQmU2g05Vue96
HODDRTHpPpuMVYzPPvIy4YSw5CNnVhlAEbd5qzbln4vU7Pf47qoQRoeVpEo9aohq
mUf18T/NoyFhrXuTh9lplEvsNDy8pnGcs8bFYmUVJQKy3cwSX4F9vSAdjxY92C1l
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 463192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-20 08:45:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-21 13:41:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT38139771'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.taqa.com.eg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26937892519550401082198264097846402155377419958878948604334345603158425859295313233154127946982201856207629373601179572196191657303748582868740869285467900040549795648696961428690891909876994230685588723479352427395479978554955012628659094613178369485012848224602152744542225646550302792371095270444948377690442370506674193297058853309284892732825219179560468194470434453055480615867585373465653412630238242181457206414368292686124242123004975566242997523107112520667565318470086637657576028459662872616232167022434792173654462845896317115080066565126830807616575156466203488637025346137603982879292840551338667238739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taqa.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqa.com.eg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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