student.sfek.kz

Issued by WoSign CA Free SSL Certificate G2

About this certificate

This digital certificate with serial number 3b:94:da:a9:56:b4:47:b3:6d:7f:9a:46:18:c8:ae:03 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=student.sfek.kz

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:94:da:a9:56:b4:47:b3:6d:7f:9a:46:18:c8:ae:03
Serial Number (int): 79197346668059908055216580621601648131
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 49:f0:28:cb:d3:cb:3c:5a:a1:41:26:a3:e6:0d:5c:bd:cf:7d:87:41
AuthorityKeyId: d2:a7:16:20:7c:af:d9:95:9e:eb:43:0a:19:f2:e0:b9:74:0e:a8:c7

Fingerprint (sha1): ae:13:a5:1d:d6:48:08:3e:18:e9:e5:b2:df:35:25:07:fd:45:55:6a
Fingerprint (sha256): 8b:81:d7:69:00:38:f2:d7:de:e6:9b:5c:ea:1b:54:b8:a4:dd:99:2c:85:75:7c:e5:0a:50:6c:23:f4:26:ee:9c

Issuing Certificate URL: http://aia1.wosign.com/ca6.server1.free.cer

Revocation information

OCSP Server: http://ocsp1.wosign.com/ca6/server1/free
CRL Distribution Point: http://crls1.wosign.com/ca6-server1-free.crl

Check the revocation status for certificate student.sfek.kz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for student.sfek.kz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

student.sfek.kz

Other certificates including the domain name sfek.kz

(limited to 100 certificates)

Certificate

The complete raw certificate details for student.sfek.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79197346668059908055216580621601648131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-05 18:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-05 18:12:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'student.sfek.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824634835269386485361425643938802191616489066589747642977693566431565576845396601721048136665704276907291894577185454602420052984077567803411925729961731451976302847753934906687931611998454116313120433391276825129319215581935048088454826519456894009077166239421613457372469611537553896485693356067033405919815672068311429485225610735498356741088023984265322757233109668043068814180561437092457400622898926632709276857469298303736404016744802194149286996911398204481009601337591645301308912594767048423968121299166882100088348283677202781015000185324320074508522021568428715057049611449349661247432794125016234184806485383415249063604348598035864672236843140060581434489311629385307397160927162869435401670593622081432057644886376706582373329729216883257500715983948778400893597085394407405246635580778180463167078967740017021141161095987734577060827995340357668476696616330740319810626673430791862449001954158101105453181279867667742967915064954283798865010632807418847541300031322436312828539692243686125536120308270781203548205895201793866853319244945946036921716317213015709474044272335372000773118001452984804070052655205227428456056173861109616364785081707186929890677597485117982126249587212081064349932142621276211015224107021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49f028cbd3cb3c5aa14126a3e60d5cbdcf7d8741
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2a716207cafd9959eeb430a19f2e0b9740ea8c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca6/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca6.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca6-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.sfek.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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