www.sif2.ro

- SIF MOLDOVA SA -

Issued by certSIGN Enterprise CA Class 3 G2

About this certificate

This digital certificate with serial number 20:06:05:16:70:60:03:f0:98:99:60:1b:5d:3c:5c:de was issued on by certSIGN.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SIF MOLDOVA SA

Organization: SIF MOLDOVA SA
Organization unit: IT
State / Province: Bacau
Locality: Bacau
Country: RO

certSIGN

Organization: certSIGN
Organization unit: certSIGN Enterprise CA Class 3 G2
Country: RO

This certificate has expire since

Certificate Details

Serial Number (hex): 20:06:05:16:70:60:03:f0:98:99:60:1b:5d:3c:5c:de
Serial Number (int): 42566552836114507054848159734191381726
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a6:c6:ed:aa:e9:d8:30:89:fd:39:0a:cb:23:33:14:5d:56:b0:a6:60
AuthorityKeyId: f6:eb:98:9e:40:69:ab:48:60:9d:46:16:ff:9e:c0:3b:03:ba:9b:fd

Fingerprint (sha1): b4:6d:7c:c1:cd:b7:7d:29:ee:7e:95:ff:06:ad:82:3f:b0:53:ad:42
Fingerprint (sha256): b3:9a:c5:32:2c:c2:d3:ae:d7:38:f6:4d:11:1b:5f:3c:bc:c7:28:1c:18:de:74:e8:95:d0:0c:e3:3e:25:61:76

Issuing Certificate URL: http://www.certsign.ro/certcrl/enterpriseg2.crt

Revocation information

OCSP Server: http://ocsp.certsign.ro
CRL Distribution Point: http://crl.certsign.ro/enterpriseg2.crl

Check the revocation status for certificate www.sif2.ro

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sif2.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sif2.ro

Other certificates including the domain name sif2.ro

(limited to 100 certificates)
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro
www.sif2.ro

Certificate

The complete raw certificate details for www.sif2.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplSWGx6nmiQuPsB+iDnM
5yduBeAWKVsUy+HaTAlF30lFbZULWZ1Y83J/oYMLVOHzPdOQunsmL3lw1xEQii+4
V5O4ZTn9F6yGGLuCq9v37j1Gd2UTGAP2lwyjmApzfomX5BLFHJu1lYrChX4ublGk
muMZLC2Gcug8jkBcw0aDwKWYInXyFZVEI5PX+F/h+w8bW3GsrDB2YkfHVMonmjaL
drqe1O+5USgxWeQ5sOHtjuxLmMz446qQ0Qh+8QyLJ6lXGovNvSGICLRLYt2E1zGs
uSYGGDXcdMk1QhFdqPWwfYgNoJv9oFJ2hhjimzOVlY0cg0Ct07kZW0vgOl+WW4LL
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42566552836114507054848159734191381726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN Enterprise CA Class 3 G2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN Enterprise CA Class 3 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 07:17:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 07:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bacau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bacau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SIF MOLDOVA SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.sif2.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20997269708792301027236599350620224708948307494648003342435507479702467837272949953190601904292310883257372551261830482790981216343701431623039027023558327566101517814160745834918434178986280482726111107888497428650020616098728601361741419446848712842153665762212679279338207831118556816052824401682406279550571365423131741724409914675643905552013858507072531304626460407628071572121893934367162474974668041376936870342896587233116457919594038257051415606584572159770661161492706249173751365590348210019659199000883834911857574594292956904269057798167345872356146788157274646990460480132101727701766724799233851050913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certsign.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certsign.ro/certcrl/enterpriseg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f6eb989e4069ab48609d4616ff9ec03b03ba9bfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6c6edaae9d83089fd390acb2333145d56b0a660
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25017.1.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certsign.ro/enterpriseg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sif2.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001651873a4800000040300483046022100d9bdfcdfcb1c899390195cba6f5ccedf6cf7caa79f4ee713c47a2090bddffdea022100c4a52cfd7f38a204fe98052c017740587ccb6a82ee69dbc471f78df6a367c0bd007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001651873a7d30000040300473045022100af926e029a6f26cb7b0c5aa5c4c2c70f06b87dbd96fcc77e1d54b64b58490c7d02201eeb6335511027d277c9c60fc121f70bed6c49c97d13c9c37598cf4943c343f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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