cstd.org
Issued by Encryption Everywhere DV TLS CA - G2
About this certificate
This digital certificate with serial number 03:a4:c1:a3:99:b4:0b:aa:28:f6:ad:bc:47:6f:82:4c was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cstd.org
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:a4:c1:a3:99:b4:0b:aa:28:f6:ad:bc:47:6f:82:4cSerial Number (int): 4843148138967322182395242639006859852
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 8b:48:fe:27:e6:67:f3:74:27:98:c9:56:80:e7:7d:28:a5:0d:21:af
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6
Fingerprint (sha1): 86:72:69:b7:91:0a:c6:8e:44:c3:02:f2:46:26:33:0f:b6:1c:4a:98
Fingerprint (sha256): 94:c2:56:48:9d:18:4c:2f:73:27:a6:cb:a6:fe:8f:34:dd:f5:b5:c5:f1:e2:26:f4:2c:18:6b:69:c0:84:cf:d7
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate cstd.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cstd.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cstd.org
Other certificates including the domain name cstd.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for cstd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIQA6TBo5m0C6oo9q28R2+CTDANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzIwHhcNMjQwNTEwMDAwMDAwWhcNMjUwNTEwMjM1OTU5WjAT MREwDwYDVQQDEwhjc3RkLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoqILhh/5Z41oh5ah3kX/016ChGAq5RgUOLV0NEnZDlMgL6oq8qIAPxaUCx LOo3B2YwQYkCEAVE1a4E1oQZYwwL1Kk6a0FqbvMlDssVEV4UHzk1c2l3NhXRBR0/ FytPiYZ0GYhLcQiAFGc+t3xD5DjwuFIZx4hnNivGYAHS0h4VrYTqe/7Dwgz/hU6L P9nZiqwSk2QId+G8PdGTZbmKVnMOe5ilyHQIB7A0eQR2rqFlBmjlaM58Si8hZe5g ZNpeeNQvl14tOzey4E6/PGzwJuTmxdqVAiI6CxyX6M7aBrHE4V7VM/EynP5Ehfa1 dixQZBjT119etxR1HjhTjH6zxTECAwEAAaOCAtswggLXMB8GA1UdIwQYMBaAFHjf kZBf7t6s9sV169VMVVPvJEq2MB0GA1UdDgQWBBSLSP4n5mfzdCeYyVaA530opQ0h rzATBgNVHREEDDAKgghjc3RkLm9yZzA+BgNVHSAENzA1MDMGBmeBDAECATApMCcG CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBgAYIKwYBBQUH AQEEdDByMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSgYI KwYBBQUHMAKGPmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9FbmNyeXB0aW9u RXZlcnl3aGVyZURWVExTQ0EtRzIuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEE AdZ5AgQCBIIBbgSCAWoBaAB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFi mjnfAAABj2Dhac4AAAQDAEcwRQIgeHWbwq/dhiGKjaUjKxvfJ2K6plHD/Jcp8KW3 7iC6GQUCIQCKmQng2bAZ/ZoHa9U97wMw0Opb9kMBez+Qs1vz0xZqIwB1AH1ZHhLh eCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABj2DhaTsAAAQDAEYwRAIgZBEg S3R0KBR9x38q7nH1+zWSN2lM1EA2s7VJ6JBS01sCIDq6eSn8aSY/RGSTAfDbLHmY uDxpLHb1OUrF0erZo+soAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43 jlAAAAGPYOFpVAAABAMASDBGAiEAsDK2anGkx/CW/NTHwkTVkNQk98jV1OXXoQ8C 4iXIu8wCIQCPr7On0Z/beHL2Ei15qQtEGSxhNVLhe29JnteDMzCFQjANBgkqhkiG 9w0BAQsFAAOCAQEA1hmXdy7tmDxXpGYcm1GJLiaVT8sMnO3gCmMsTnAoNRqLu/ye /Jfd5YdLL8vgF19II36neHQpr/ad6zZcRuMJ+IYnNf9mnzXVC7ZiFzemvZB0UnhZ sMf1CPPZyfKjUCWdcmv7Fz3I6rSwi7VevcjKYm4a0aXa91jTXE150UcZiGk0Jrwy lf/ZcA1Sxcc7jW8OeZ2o+POkBwBoL6zCeNMLn6EjYOjksLfB+QTrIAsUIC/pEXaK 9KAr4ox439Dk3Q7ZZKuyqmnxV17scoLfh8xbtsZt0wWQogYZ8Y2Xm2iN2XotKQP0 /rzLMJhqijHluc5/eWccX0EYG/Ih9uFBp0rxUA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ioguGH/lnjWiHlqHeRf /TXoKEYCrlGBQ4tXQ0SdkOUyAvqiryogA/FpQLEs6jcHZjBBiQIQBUTVrgTWhBlj DAvUqTprQWpu8yUOyxURXhQfOTVzaXc2FdEFHT8XK0+JhnQZiEtxCIAUZz63fEPk OPC4UhnHiGc2K8ZgAdLSHhWthOp7/sPCDP+FTos/2dmKrBKTZAh34bw90ZNluYpW cw57mKXIdAgHsDR5BHauoWUGaOVoznxKLyFl7mBk2l541C+XXi07N7LgTr88bPAm 5ObF2pUCIjoLHJfoztoGscThXtUz8TKc/kSF9rV2LFBkGNPXX163FHUeOFOMfrPF MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4843148138967322182395242639006859852 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cstd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27540724481674639032838389588954307183697436143462164073143145078162799897904814419008317747215113007763781325460556552487169491518375618361572817933967626393072471498842231706566685981840071579430427603121380485591144218030914761840015638757016238890019648918690859701471198389239233404620100875908377206741748703946872758433367242190610940356074354743151380872655346891313602108050067017793205093968181158816149630320744883118544819916649001452661447182056427137331600586705741120854364589290695602296097648648003193620126838690907173547828438346864991990344212023921075126157784519768901451489226277296245419787569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8b48fe27e667f3742798c95680e77d28a50d21af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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