mail.shaparak.com

- Shaparak Electronic Card Payment Network Co. (PJS) -

Issued by KEYNECTIS Extended Validation CA

About this certificate

This digital certificate with serial number 11:21:69:73:81:0e:e1:91:9d:b0:8b:62:72:b9:99:aa:a9:14 was issued on by Certplus.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Shaparak Electronic Card Payment Network Co. (PJS)

Company registration number: 10320718470
Organization: Shaparak Electronic Card Payment Network Co. (PJS)
Organization unit: IT DEPARTMENT
State / Province: TEHRAN
Locality: TEHRAN
Country: IR

Certplus

Organization: Certplus
Organization unit: Entity of KEYNECTIS for CA services
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:69:73:81:0e:e1:91:9d:b0:8b:62:72:b9:99:aa:a9:14
Serial Number (int): 1492278347619621153271116874997676984936724
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ac:ca:4e:58:14:50:39:78:3a:f3:e8:a7:8a:88:24:05:25:91:84:3b
AuthorityKeyId: 13:c1:32:2e:92:5c:ae:cd:6d:8f:a2:f3:e0:b4:49:b4:86:f4:a2:5c

Fingerprint (sha1): ac:85:49:e9:4f:09:40:51:17:82:7b:33:13:08:49:c4:ad:c2:fa:04
Fingerprint (sha256): 99:58:33:3b:f7:db:b8:77:a2:ad:d1:48:8d:43:e6:ff:ff:f6:fe:45:4e:92:1a:ea:7f:87:31:01:5b:59:7e:a8


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/evssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl

Check the revocation status for certificate mail.shaparak.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.shaparak.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.shaparak.com

Other certificates including the domain name shaparak.com

(limited to 100 certificates)
shaparak.com
*.shaparak.com
*.shaparak.com
*.shaparak.com
mail.shaparak.ir
mail.shaparak.com
shaparak.com
mail.shaparak.com
mail.shaparak.com
mail.shaparak.com
*.shaparak.com
*.shaparak.com
mail.shaparak.com
mail.shaparak.com
*.shaparak.com
mail.shaparak.ir
mail.shaparak.com
shaparak.com
*.shaparak.com
mail.shaparak.com
mail.shaparak.com

Certificate

The complete raw certificate details for mail.shaparak.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nscW4unWSVIrvXXv3R0
GmlrCbQ8l79+0zdoiHQqesJmDlr/2enKXwaujuQ64wwEhGE4WuAvb3WPUaoAr7NL
pwwQL9Cz6RdlOSnzFIsgMTlh5gt408nTMW1i+4I0RF3Mby/BW1eRgo/D7DQoZaZW
2++gw1wfgWOlPlEetya3dIZaKS2Fsv/evEByo1GeJcyrWdhEIDdufkxhPkVk+ywy
Ea9WUbf9g8qDe0bCadQ0MBwm9l8GP9CqxCjY0aJUuY4oyZj+jAAouBqZhdRoowfi
LLPT0vu1R8gvRnkfKH+dy5m4qbh674Ldsoi//KZxrHIZDKlqTfoj2AcM5Ctzlbfb
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492278347619621153271116874997676984936724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certplus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entity of KEYNECTIS for CA services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-25 13:52:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-25 13:52:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '10320718470'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TEHRAN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT DEPARTMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shaparak Electronic Card Payment Network Co. (PJS)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.shaparak.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26570752227108300588273856313579162399244268417037072337627389661627453721664867115176683083031812614413550256908494322355206293030850402892905383195470830729475451778909915315981989903778882403674375025152555117789958919072352621383152043994213744231886063813864327920605679354085272520499872772665147477545758360565281039667611987800198987602314109676989706484999193719989408218047023762340322834364412897414636603838355329894162770148618858090655209908107579858820527036177899419310194095895342964821951755910101531499861942699917013674674021776258312626647902307765017751813300963085149994035910225624208600718269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.shaparak.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisevca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/evssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.3.1 (CertPlus EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acca4e58145039783af3e8a78a8824052591843b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 13c1322e925caecd6d8fa2f3e0b449b486f4a25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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