Egov-mdm.nsdl.co.in

- NSDL e-Governance Infrastructure Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 27:2b:cc:a6:9f:d1:20:dc:00:00:00:00:50:fa:89:a9 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSDL e-Governance Infrastructure Limited

Organization: NSDL e-Governance Infrastructure Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:2b:cc:a6:9f:d1:20:dc:00:00:00:00:50:fa:89:a9
Serial Number (int): 52067311413423776171826283931508574633
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b1:de:0a:73:8d:cc:20:69:36:f4:5f:9d:8a:18:20:08:7b:55:0d:53
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cc:fd:0c:8c:51:ed:47:b7:55:34:88:6a:b0:cf:a8:cc:80:41:61:30
Fingerprint (sha256): e5:cf:6e:1f:51:71:c3:bd:1f:79:77:82:e7:5d:a1:61:7e:77:42:8f:24:b7:07:f7:b3:37:c0:a3:f6:0d:ed:d9

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate Egov-mdm.nsdl.co.in

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Egov-mdm.nsdl.co.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Egov-mdm.nsdl.co.in
www.Egov-mdm.nsdl.co.in
Egov-seg.nsdl.co.in
Egov-mag.nsdl.co.in
Egov-ENS.nsdl.co.in

Other certificates including the domain name nsdl.co.in

(limited to 100 certificates)
Egov-mdm.nsdl.co.in
nsdl.co.in
www.fpi.nsdl.co.in
nsdl.co.in
npscra.nsdl.co.in
nsdl.co.in
Egov-mdm.nsdl.co.in
vhpeeps4ci.sap.egov-nsdl.co.in
www.fpi.nsdl.co.in
www.fpi.nsdl.co.in
mgpsy.nsdl.co.in
dpm.nsdl.com
nsdl.co.in
npscra.nsdl.co.in
Egov-MDM.nsdl.co.in
*.nsdl.co.in
www.fpi.nsdl.co.in
www.fpi.nsdl.co.in
vhpeeps4ci.sap.egov-nsdl.co.in
nsdl.co.in
nsdl.co.in
nsdlcas.nsdl.com
www.fpi.nsdl.co.in
www.fpi.nsdl.co.in
npscra.nsdl.co.in
www.npscra.nsdl.co.in
Egov-mdm.nsdl.co.in
dpm.nsdl.com
Egov-mdm.nsdl.co.in
Dep.mdm.nsdl.co.in
www.fpi.nsdl.co.in
Egov-MDM.nsdl.co.in
nsdl.co.in
www.fpi.nsdl.co.in
nsdl.co.in
gateway-2.beckn.nsdl.co.in
www.fpi.nsdl.co.in
i-assist.nsdl.co.in
mgpsy.nsdl.co.in
www.fpi.nsdl.co.in
gstpilot.nsdl.co.in
dpm.nsdl.com
*.nsdl.co.in
webmail.nsdl.co.in
nsdlcas.nsdl.com
www.fpi.nsdl.co.in
npscra.nsdl.co.in
npscra.nsdl.co.in
npscra.nsdl.co.in
*.nsdl.co.in
nsdlcas.nsdl.com
nsdl.co.in
www.fpi.nsdl.co.in
dpm.nsdl.com
nsdlcas.nsdl.com
Webmail.nsdl.co.in
npscra.nsdl.co.in
webmail.nsdl.co.in
nsdl.co.in
*.nsdl.co.in
Egov-mdm.nsdl.co.in
Dep.ens.nsdl.co.in
Egov-mdm.nsdl.co.in
Webmail.nsdl.co.in
nsdlcas.nsdl.com
www.fpi.nsdl.co.in

Certificate

The complete raw certificate details for Egov-mdm.nsdl.co.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aE0/pUG8SjlXm3TRdde
pv5AirPxqkAnI++FtMss6gQZgRyKnXelXiial2dlddRX6My9kmAYhJSYaZXlylg+
RisPRLCxSpRgFafoqEPwhs0TMSKZEXpKxX72PhIP8dvEoheq9LrSGk6+Fo1y/GCP
P7mkOaoBEJeFg1sZtMfP3zbgs8SySj5nqZGa133QBaxrlt2YOFAMIk4tkUrZbJDA
iMJmmDh+hCNamQchfVfWWlSebdbDP3Gt0jqbjzDqXkW6DdaUWltEFNBYt3bp46Sp
wfV+dcQQLmVnCUBhpsv+9iWFFKWdE75tuNyBfNFXn7O+YXJwhTIFMcEpf57/vs5t
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52067311413423776171826283931508574633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 11:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-08 11:30:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSDL e-Governance Infrastructure Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Egov-mdm.nsdl.co.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27473206316863084934058573785172587313389258794735548831264542169841390155098966767280287885727028768555061350687997608833544002534964709054045203786414970637895019779559353210605700884269708949305535803856294753505489937202700643976985557113668910188688298431866181814220207213505023207056153503247603030014521451015584963123970613607432263802217747706784822648859601115818954231938604193854607058358164716421482042042144044435538536076267206263726299329331109664369115064855893643464190972417893850985205314438282420885258247950585888692179260379650596969966578342616247407450261907456163446636747971003367348399513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Egov-mdm.nsdl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Egov-mdm.nsdl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Egov-seg.nsdl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Egov-mag.nsdl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Egov-ENS.nsdl.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1de0a738dcc206936f45f9d8a1820087b550d53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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