AffirmTrust Validation Authority

- AffirmTrust -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 24:6b:28:8b:d4:74:43:fe:77:49:08:d2:6c:25:8f:c6 was issued on by AffirmTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificate had 0 embedded SCTs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

AffirmTrust

Organization: AffirmTrust
Country: CA

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate will expire on

Certificate Details

Serial Number (hex): 24:6b:28:8b:d4:74:43:fe:77:49:08:d2:6c:25:8f:c6
Serial Number (int): 48408605986970312100172910276018278342
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f7:92:2d:10:94:40:7c:55:88:fc:94:65:7b:84:90:3c:2c:a4:29:00
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): f0:4e:9b:0e:7d:f5:a9:3c:0e:03:a0:8a:86:e0:63:53:04:e5:2b:26
Fingerprint (sha256): 85:f8:16:91:0c:45:9b:b5:20:21:15:53:11:89:56:bb:0e:7f:20:d9:7b:8f:b4:ed:9a:7a:72:34:20:ce:a4:67


Revocation information


Check the revocation status for certificate AffirmTrust Validation Authority

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AffirmTrust Validation Authority

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

OCSP Signing

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for AffirmTrust Validation Authority in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIID4zCCAsugAwIBAgIQJGsoi9R0Q/53SQjSbCWPxjANBgkqhkiG9w0BAQsFADCB
gjELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT
ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTAwLgYDVQQDEydBZmZp
cm1UcnVzdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgLSBPVjEwHhcNMjIxMDI4MTU0
OTA0WhcNMjUxMDI3MTU0OTAzWjBOMQswCQYDVQQGEwJDQTEUMBIGA1UEChMLQWZm
aXJtVHJ1c3QxKTAnBgNVBAMTIEFmZmlybVRydXN0IFZhbGlkYXRpb24gQXV0aG9y
aXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXsSDlbPWNtW8cRh
Ka7AhNRcC3/FHaU2CLHnKka8AaT2yvqSQXgaDxlS5DLgLUqGpjgl6i13dn3+BF2I
tzTEitimApCEE/Xv7YVrcE2Wxxs+dOWqhGmCpFf76EbpeZRWzygN5bU0DmMfjEgz
tMBbnMvn4/aUZl5xd2rREQ0aC9eowzhjEVZg/6sywj564jyA+ydHXaSZyhOdJm3u
w4n1av3PRLHJiVevOlRBIOJFUtWzX+o9LB4zrjZi7Gf6U5PrISGyWltZ6RYZkSR+
anEzaCIX87e9gPr79VCHYK25U3huFRV20bfgHENqH0s5FpgyRiFJqsUIyznAEMfv
kn0FgQIDAQABo4GHMIGEMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPeSLRCUQHxV
iPyUZXuEkDwspCkAMB8GA1UdIwQYMBaAFP5gww2kop0hT3p4TGLF2xT8OXjEMA4G
A1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDCTAPBgkrBgEFBQcwAQUE
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3Jed0hqMuUZt3a1Z5R5GBRYSaDd950ejp
zKfni6ObVRekbNwfIqjxg2g7gXItP8K23gmmydBKkKBamtHAU3ruJtJxCTi2WpxF
tUclZpRTJBuS3jifbbJWQf+5vXQMKmpHtdYv8QC9UzzMU9Syfi3KJ587Yef3O/9Q
PWBLKwu/LC6Q9Rs2xHF3iOaR8Usr6FzTrJvVeKcgkodvHx7oAX3QBIRfl7yNUcxH
bvWerw5Qx8TcDvqRy6Li36PhqAw+WUCFRX91+hULeWFLFnUeuG07BdwDB+afDfkl
4hB+hI4xbZBJp7yIy010avzhaRW/RYZw2px15M1D0bxNg1e/jkYj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXsSDlbPWNtW8cRhKa7A
hNRcC3/FHaU2CLHnKka8AaT2yvqSQXgaDxlS5DLgLUqGpjgl6i13dn3+BF2ItzTE
itimApCEE/Xv7YVrcE2Wxxs+dOWqhGmCpFf76EbpeZRWzygN5bU0DmMfjEgztMBb
nMvn4/aUZl5xd2rREQ0aC9eowzhjEVZg/6sywj564jyA+ydHXaSZyhOdJm3uw4n1
av3PRLHJiVevOlRBIOJFUtWzX+o9LB4zrjZi7Gf6U5PrISGyWltZ6RYZkSR+anEz
aCIX87e9gPr79VCHYK25U3huFRV20bfgHENqH0s5FpgyRiFJqsUIyznAEMfvkn0F
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48408605986970312100172910276018278342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 15:49:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-27 15:49:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Validation Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23414774759588994860805093998560394220252679491010871777588100309897368303864061424900895128162741284435980486315818505017350205341146664777671056042544412143139397876165629104494330760632512385691350147998589567149312937786518830377129582625720728714372095196998363947646741658574397278994857285098893360346906715802221001784149986663553159838348159177827361256668323530924883585386830587229416290851596341211250329623584158252840886985558196000280880934914235273603686685071993529424521339461382361156563247351430310659376275761167311490337525280338673149599075164975025593443488562987048474667441262900277476656513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7922d1094407c5588fc94657b84903c2ca42900
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.9 (ocspSigning)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1.5 (ocspNoCheck)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007725e77486a32e519b776b567947918145849a0ddf79d1e8e9cca7e78ba39b5517a46cdc1f22a8f183683b81722d3fc2b6de09a6c9d04a90a05a9ad1c0537aee26d2710938b65a9c45b54725669453241b92de389f6db25641ffb9bd740c2a6a47b5d62ff100bd533ccc53d4b27e2dca279f3b61e7f73bff503d604b2b0bbf2c2e90f51b36c4717788e691f14b2be85cd3ac9bd578a72092876f1f1ee8017dd004845f97bc8d51cc476ef59eaf0e50c7c4dc0efa91cba2e2dfa3e1a80c3e594085457f75fa150b79614b16751eb86d3b05dc0307e69f0df925e2107e848e316d9049a7bc88cb4d746afce16915bf458670da9c75e4cd43d1bc4d8357bf8e4623