emipd.tw

- Smarten Education Technology Co., Ltd. -

Issued by TWCA Secure SSL Certification Authority

About this certificate

This digital certificate with serial number 47:e7:00:00:00:06:a9:85:5f:e7:c6:6f:c8:30:9d:48 was issued on by TAIWAN-CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Basic Constraints extension is present (2.5.29.19) and marked as non-critical basicConstraints MAY appear in the certificate, and when it is included MUST be marked as critical (CA/Browser Forum BRs: 7.1.2.7.6)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Smarten Education Technology Co., Ltd.

Organization: Smarten Education Technology Co., Ltd.
State / Province: Taiwan
Locality: Taipei
Country: TW

TAIWAN-CA

Organization: TAIWAN-CA
Organization unit: Secure SSL Sub-CA
Country: TW

This certificate will expire on

Certificate Details

Serial Number (hex): 47:e7:00:00:00:06:a9:85:5f:e7:c6:6f:c8:30:9d:48
Serial Number (int): 95574608275058626253541810817039637832
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:54:3d:41:71:4c:98:ab:9f:b4:cb:f9:ee:88:fc:3c:ec:d0:a4:63:4a:1a:50:6f:7b:8a:27:98:db:a7:f5:55
AuthorityKeyId: a0:92:06:71:0a:b1:4a:50:0d:4f:dc:cf:19:c6:ad:13:cd:52:95:7b

Fingerprint (sha1): 8f:14:8d:ea:2d:0a:40:72:63:be:12:88:1b:86:35:a1:bb:e9:61:47
Fingerprint (sha256): d2:cd:39:e6:d4:4d:10:0e:9d:de:45:a1:7b:c1:be:ae:ca:4e:63:c6:93:0c:57:21:cd:77:aa:d1:d6:12:f4:eb

Issuing Certificate URL: http://sslserver.twca.com.tw/cacert/secure_sha2_2023G2.crt

Revocation information

OCSP Server: http://twcasslocsp.twca.com.tw/
CRL Distribution Point: http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2023G2.crl

Check the revocation status for certificate emipd.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emipd.tw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emipd.tw

Other certificates including the domain name emipd.tw

(limited to 100 certificates)
member-2.cpbrandsite.com
kdwyer.dev
ek.lms-it.be
private-replies-test.ideta.io
private-replies-test.ideta.io
course.emipd.tw
www.bwltech.com
identity.eatorigami.com
emipd.tw
emipd.tw
www.ramoeletsi.co.za
emipd.tw
permiancapitalmanagement.com

Certificate

The complete raw certificate details for emipd.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltRoiZ6EhDhTIZWpinZr
SwTMt/Tx1q6NicfgPrcbC9jKMhzK/3TYgOSNDZAyc8gd2l1EoD/lGuohWrjKp2Kz
/WBW89TS42ZDmfUfoJo/452u0qU2sjn6/MxvOkkZPjHyhsT7PYFnL+RP7P+SMX5c
DczsRbTOKMGQuatZ8kfAlDtn8sGLR9UTIT4iO/drh2ch0w4/3U+cs+XSoWm3ZaAw
32eiD82Xf7ZTqzIURapw4bdcRdvSs6jYFGkxcMSu1ZJC1C5262JhhE2bPGw3ttup
We5afz27KRwdvsyiCsl0iMb0xKb6bABo/x6+om1QwxrJdezzG+hdHLFQ6umzNDD4
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95574608275058626253541810817039637832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TAIWAN-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure SSL Sub-CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TWCA Secure SSL Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 09:51:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taiwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taipei'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Smarten Education Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emipd.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19040488206050698562690763281151660249177594956391582382366120636833057868597863182593277965935038680521417001313493483894285415692395900818514320220621268480670092031780888113469615850107650289117975599861580391230700007194462906025612935294924931019977739274637044874683062673976239140525189038108068784023693894653614352562116489374095281242228595474399497953348287537931288076096787661877347348382215285362934376675673550795268411857259576762399257200033472418291774271566733023996297475740490919355782885669037723562418775381293244041020842568638981099615130496093962249709012120366455015323040935152183856396367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a09206710ab14a500d4fdccf19c6ad13cd52957b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
							44543d41714c98ab9fb4cbf9ee88fc3cecd0a4634a1a506f7b8a2798dba7f555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/sslserver/Securessl_revoke_sha2_2023G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emipd.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sslserver.twca.com.tw/cacert/secure_sha2_2023G2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://twcasslocsp.twca.com.tw/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.40869.1.1.21
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.twca.com.tw/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bcbabac5c4956f17487ef4e97ac456eafd27cb3eb35d4834919804d8f003dff7022f003c38ea3a119093d92cc5ea1ccae3d99deb5e7606c5b7ae211b4da57645ca0445a178acb9ec4f5b4caab63d8d6c79e65a96a6cf417a8fb7d06c7b219c34f4aaac5d8a56974473ab0445a1022a3f0b09fd2103cc824bbfc02be6130bb31d23c509e24b7478514d7e64702ed6d598562e97a509ff799ca659e48e11377c29319cd2b1918e2a27b578acea3964a70326c06ec81ab51a78b960f595720a0898248e5ffe3a103b578334d31249f71375357aa17bba83908e012504b8185f2441cfb41c31fb9207f3b4b3c99616f989d9d6a73b1873646e8a68df3d95965d724