emipd.tw

- Smarten Education Technology Co., Ltd. -

Issued by TWCA Secure SSL Certification Authority

About this certificate

This digital certificate with serial number 47:e8:00:00:00:06:fc:07:36:61:3f:10:41:f5:51:2b was issued on by TAIWAN-CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Smarten Education Technology Co., Ltd.

Organization: Smarten Education Technology Co., Ltd.
State / Province: Taiwan
Locality: Taipei
Country: TW

TAIWAN-CA

Organization: TAIWAN-CA
Organization unit: Secure SSL Sub-CA
Country: TW

This certificate will expire on

Certificate Details

Serial Number (hex): 47:e8:00:00:00:06:fc:07:36:61:3f:10:41:f5:51:2b
Serial Number (int): 95579800571917550710306438359740141867
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:54:3d:41:71:4c:98:ab:9f:b4:cb:f9:ee:88:fc:3c:ec:d0:a4:63:4a:1a:50:6f:7b:8a:27:98:db:a7:f5:55
AuthorityKeyId: a0:92:06:71:0a:b1:4a:50:0d:4f:dc:cf:19:c6:ad:13:cd:52:95:7b

Fingerprint (sha1): 5d:9e:79:7b:ca:0f:5f:45:55:4c:64:3a:1c:c4:f4:c0:80:8c:0b:db
Fingerprint (sha256): c0:8c:78:31:95:4f:e5:20:a5:48:51:9d:c9:da:03:d5:fa:95:b5:de:65:96:3c:9e:95:e1:96:0b:ef:a7:fa:0c

Issuing Certificate URL: http://sslserver.twca.com.tw/cacert/secure_sha2_2023G2.crt

Revocation information

OCSP Server: http://twcasslocsp.twca.com.tw/
CRL Distribution Point: http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2023G2.crl

Check the revocation status for certificate emipd.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emipd.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emipd.tw

Other certificates including the domain name emipd.tw

(limited to 100 certificates)

Certificate

The complete raw certificate details for emipd.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltRoiZ6EhDhTIZWpinZr
SwTMt/Tx1q6NicfgPrcbC9jKMhzK/3TYgOSNDZAyc8gd2l1EoD/lGuohWrjKp2Kz
/WBW89TS42ZDmfUfoJo/452u0qU2sjn6/MxvOkkZPjHyhsT7PYFnL+RP7P+SMX5c
DczsRbTOKMGQuatZ8kfAlDtn8sGLR9UTIT4iO/drh2ch0w4/3U+cs+XSoWm3ZaAw
32eiD82Xf7ZTqzIURapw4bdcRdvSs6jYFGkxcMSu1ZJC1C5262JhhE2bPGw3ttup
We5afz27KRwdvsyiCsl0iMb0xKb6bABo/x6+om1QwxrJdezzG+hdHLFQ6umzNDD4
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95579800571917550710306438359740141867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure SSL Sub-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TWCA Secure SSL Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 04:30:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taiwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taipei'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Smarten Education Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emipd.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19040488206050698562690763281151660249177594956391582382366120636833057868597863182593277965935038680521417001313493483894285415692395900818514320220621268480670092031780888113469615850107650289117975599861580391230700007194462906025612935294924931019977739274637044874683062673976239140525189038108068784023693894653614352562116489374095281242228595474399497953348287537931288076096787661877347348382215285362934376675673550795268411857259576762399257200033472418291774271566733023996297475740490919355782885669037723562418775381293244041020842568638981099615130496093962249709012120366455015323040935152183856396367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a09206710ab14a500d4fdccf19c6ad13cd52957b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
							44543d41714c98ab9fb4cbf9ee88fc3cecd0a4634a1a506f7b8a2798dba7f555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2023G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emipd.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/cacert/secure_sha2_2023G2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://twcasslocsp.twca.com.tw/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.40869.1.1.21
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.twca.com.tw/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2bc71b540000040300473045022014add959db1c46320491a820d57f456d583a562ea04875a57041508be0704faa022100954cfacb8275ca3da6fe3623c9d3d2f4ce8f1300d1c79002470e6260a93f701900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2bc71ba50000040300473045022100811525082348ebb80d3f3882e4cb74e4a871576ea5cface3f19d69109bd5cb5a02207b04e4d04551323ac0fc9ffefb4e1437c58fe1ffd9eba9f2deeeeb3dcb212967007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e2bc71b8a000004030048304602210094d9b1ef96604218d5a4a2a547375e14b7d18cfedb99a950142902d085655bff022100ab5e4e442a71aea816f797c31a23043898f1d18a4bdd821c459d7efbd18143b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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