EV SSL/TLS Certificate for registry.ernet.in Issued to Education and Research Network of India

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign Extended Validation CA - SHA256 - G3)

About the registry.ernet.in EV SSL/TLS Certificate

This certificate with serial number 72:f3:2e:d5:a0:01:c9:32:8c:ce:cf:97 for registry.ernet.in was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This EV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this EV SSL/TLS Certificate review for registry.ernet.in provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 72:f3:2e:d5:a0:01:c9:32:8c:ce:cf:97
Serial Number (int): 35575281263344110167886057367
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: 00:83:d9:4f:6a:56:13:5f:68:1e:ee:ee:09:82:da:55:3a:12:e3:88
Authority Key Identifier: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (SHA-1): 02:f5:83:1d:b9:01:10:ce:39:28:0d:b5:06:2c:86:30:19:7a:f7:f5
Fingerprint (SHA-256): 20:c5:c8:8a:a4:d1:99:6c:93:4e:72:6e:08:a1:6a:7c:33:39:89:1d:a5:ff:52:29:37:dd:5a:9d:fd:36:ad:cc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation Information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3

Check the revocation status for certificate registry.ernet.in
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for registry.ernet.in

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for registry.ernet.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8I8H1lR9lYEo0u8pfFR
6/T8tqRmqf3NH/Ilw1ttdgacuL2N0ltxvWXLOrnpMAhsjXTJugFoN+w72B2SfrMn
Xns9dUoKFcn/lDSnjJrIzDyNQUxaa3FgLNtWru80xMEhrCNdHX4AcNgjg7n5mlss
oZND0lG2FlCpjZbUVLMxMmxFk4ukLO4UvkqThxh6nWM1HRdftxMwxb5k7n/vnEqU
DZQOzXF2eZiKcGxNp/282LKAAoJ+lmXvkYdeKljQLsrvsMry4Pe6UyxysWhzx3W1
K+hlTq+eTGLFRSsrAi2zsR4YlB4O6V9bmjiOSJu1Rb47JbtAH7CTSiWPVoylHdUa
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35575281263344110167886057367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 12:26:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-26 12:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delhi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delhi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Education and Research Network of India'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'registry.ernet.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22187484145043755649399629496434223907379015559215995505530517995781252675183637415947098224883239847025921192432249351459232464787115940076797536325775084364081626328393568067995058367022699517221040557108086086008653424757082939817510870550648022295931890275107032516589869374372939832076014858956148710515813585902340500371965512909959148507991392929946967858567159222101206480545685702089776236106184554996534562887605081196719280594236464228928262021296183087703826549096833944841785691917223846868752171360513568153586976683999209002674482217007954752056837974610315465755432629502553081187709921266912887904873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.ernet.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registry.ernet.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0083d94f6a56135f681eeeee0982da553a12e388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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