www.zitounatakaful.com.tn

- ZITOUNA TAKAFUL -

Issued by Agence Nationale de Certification Electronique

About this certificate

This digital certificate with serial number 11:19:14:07:09:15:07:08:1d:e5:ae:78:27:44:b0:3f was issued on by ANCE.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • CAs MUST NOT issue certificates that have authority key IDs that include both the key ID and the issuer's issuer name and serial number (Mozilla Root Store Policy / Section 5.2)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

ZITOUNA TAKAFUL

Organization: ZITOUNA TAKAFUL
Country: TN

ANCE

Organization: ANCE
Organization unit: ANCE WEB
Country: TN

This certificate has expire since

Certificate Details

Serial Number (hex): 11:19:14:07:09:15:07:08:1d:e5:ae:78:27:44:b0:3f
Serial Number (int): 22727089555406936900234489869059272767
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 2b:5a:fa:b4:c4:af:53:b6:71:8b:0e:f8:da:34:57:45:c7:f4:48:61
AuthorityKeyId: 9e:c1:0d:33:49:79:ab:b3:b1:93:06:60:33:a9:6a:44:f4:b0:83:33

Fingerprint (sha1): 8f:86:3f:43:ae:ef:a2:fa:44:25:c4:a2:fa:27:7a:9d:2e:9d:0e:09
Fingerprint (sha256): 77:a6:9a:3c:d4:26:ed:d0:74:5e:e2:d8:72:9c:ad:48:9f:9e:70:d1:12:3b:8e:40:5b:ae:3e:98:bd:d5:bd:1a

Issuing Certificate URL: http://www.certification.tn/pub/cacert_web.crt

Revocation information

OCSP Server: http://ocsp.certification.tn
CRL Distribution Point: http://www.certification.tn/crl_web.crl

Check the revocation status for certificate www.zitounatakaful.com.tn

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zitounatakaful.com.tn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name zitounatakaful.com.tn

(limited to 100 certificates)
www.zitounatakaful.com.tn

Certificate

The complete raw certificate details for www.zitounatakaful.com.tn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uk7y8FBVxGTLkG9CrTS
nCNVA/SecLMZKb5clqjPkBLwGAYf7n4FVKxmMGaqhlcQ8KqEjCutKD3wf4IsUgP/
kBTmGL3aDNzHfXHlTSr+YYGYg2UbjZr+dM7IaQftfKBNNwMv3xujBulSDQg132iO
/vM+D3VK5Zqwp+5lZI4c+kiWExZzb35sHg/JkifgAVRZDD64zzEZyKpTS8G/v0Yz
F4MvQi0L0dBkgoQL/6l8eLZFz1BF1Lg4Z7tv/PmKxzLTsG2y6LD5JhniparujOnq
dNAFX/wwY/Pa9eOkutSyR0cWO+JBLa2oB1Gn7ZDP6W4pOJVYGC8YxfpcwScuHqwI
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22727089555406936900234489869059272767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANCE WEB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Agence Nationale de Certification Electronique'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZITOUNA TAKAFUL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zitounatakaful.com.tn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26924871780928541112171794281598697573718707812865765515993809602425352444713586340218536863225752849224629454707648497103988719058484523771728211822172880172486211527727041841352658835184621319387075620538322020313326619430324995207418828824043570355503823331724074509384563132285277575466352632248694502024073120509414315551483461535881071915623042119293301373191973527997007332587003161625845171559726051509413301060094203626327210353530589359744910202490203937255909827802129547566026615218805203319217485328750022374355298186768993022066597153966493876544138094544123845178832288409144773609057287973285210621963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.3 (netscape-revocation-url)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certification.tn/crl_web.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b5afab4c4af53b6718b0ef8da345745c7f44861
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ec10d334979abb3b193066033a96a44f4b08333
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TN'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANCE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANCE WEB'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Agence Nationale de Certification Electronique'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certification.tn/crl_web.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certification.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certification.tn/pub/cacert_web.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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