*.pixnet.tw

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 5c:96:e8:fd:6a:47:a5:40:b9:d4:4f:86:81:dd:d6:e1 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pixnet.tw

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:96:e8:fd:6a:47:a5:40:b9:d4:4f:86:81:dd:d6:e1
Serial Number (int): 123072545737637672906552516120397338337
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a2:5a:63:1e:18:f6:11:da:60:02:e7:62:5d:dc:d0:42:22:e9:01:21
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): e7:8d:99:5f:c6:dc:93:97:4a:54:bd:f2:10:79:88:0b:79:98:48:4d
Fingerprint (sha256): 95:33:9b:cd:5e:be:28:0b:1a:2a:03:8a:3b:9b:44:2d:f1:44:43:2c:4d:98:20:79:45:4c:d9:ce:75:3e:0e:f3

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate *.pixnet.tw

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pixnet.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pixnet.tw
pixnet.tw

Other certificates including the domain name pixnet.tw

(limited to 100 certificates)
o.vpn.pixnet.tw
cdnstats.pixnet.tw
s.vpn.pixnet.tw
appmarket.pixnet.tw
*.pixnet.tw
bill.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.streamtopic.pixnet.tw
checklogin.videos.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
checklogin.adexpert.pixnet.tw
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.adexpert.pixnet.tw
checklogin.help2.pixnet.tw
checklogin.adexpert.pixnet.tw
s.vpn.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
appmarket.pixnet.tw
api.i.pixnet.cc
checklogin.streamtopic.pixnet.tw
checklogin.help.pixnet.tw
*.pixnet.tw
checklogin.staging-buy.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
buy.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
o.vpn.pixnet.tw
checklogin.streamtopic.pixnet.tw
*.pixnet.tw
*.pixnet.tw
checklogin.help.pixnet.tw
checklogin.www.pixnet.net
checklogin.www.pixnet.net
o.vpn.pixnet.tw
s.vpn.pixnet.tw
checklogin.staging-buy.pixnet.tw
appmarket.pixnet.tw
s.vpn.pixnet.tw
api.i.pixnet.cc
*.pixnet.tw
s.vpn.pixnet.tw
o.vpn.pixnet.tw
checklogin.help.pixnet.tw
bill.pixnet.tw
s.vpn.pixnet.tw
help.pixnet.tw
colostats.pixnet.tw
buy.pixnet.tw
s.vpn.pixnet.tw

Certificate

The complete raw certificate details for *.pixnet.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JzkoYN/IT+EJ/oohTrt
d0yE78AR9/Bi1lo2V/g4aBLUMkan8CGH5qo6tXnPbEWbBk5N8B72M6416g3136dP
79q9v9kNFBmy35XP+H/LCZ+zj4Q1/6ej6gc5UzD1eBQL+cLK65xGJiKV6IAgtBzz
5ejlYZj/78K63pPVHpMnaxblxfzaZyKdA+DGmtN5IQvjGd8sDb/vOn6OnFDKAxO5
IF+VatHxhxq56FZMMmr4/xSm1k2AiijUlU8LgCm98cyE9izVf0C9ZyllwR6bNdLc
zzLbmnqUFvN9QbSk6w5K0+ynaxum6aAj5/dNGYNGXbliBLAwPx0mUQ6xCjKGp3Hf
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123072545737637672906552516120397338337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pixnet.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30879513277654739626503881538873092859407729982886427806087895333518622251004885045457882675783640030335246563106582531580055587082788993621079135840230699918204624002087443011035801616777836832657847945857263280864027489390765409000087729801152584486550223578842847485139984855180921045869872330234434850521654298584898600697977653029457710783725507641836758698543641401690289086146146288326456331161623384300465755304998811917751861691416217329063242062205662031864859051293266352288764755481803746620815908981223271035772857426561484812408467356039099360773922427073202649400092697987309205011265216451100743426031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a25a631e18f611da6002e7625ddcd04222e90121
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixnet.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixnet.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017723b9dd760000040300483046022100e944a38183f400830e43dc9057c90d711734581998048640f02a3df36293298e022100dfd4f3f2587795cacba0c9d180eff9d4e30c219ecb07d9bdc60ad75d8d6f8d18007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017723b9dd9e000004030046304402201eb74537651537c9c99c0486cfd0b336f6a9dfe12b81635ea3fc5b56e9c1a5bb02200460be15f0988cce73e2f5fc812775abef19085cbb31b7ad11649c067f16ae0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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