OV SSL/TLS Certificate for www.certizen.com Issued to CERTIZEN LIMITED

Certificate has expired

Issued by Hongkong Post (Hongkong Post e-Cert SSL CA 3 - 17)

About the www.certizen.com OV SSL/TLS Certificate

This certificate with serial number 31:3e:d3:af:d7:2e:04:2a:1f:e7:a2:e3:fb:63:94:bd:a9:dc:c8:25 for www.certizen.com was issued on by Hongkong Post.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.certizen.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Hongkong Post

Organization: Hongkong Post
State / Province: Hong Kong
Locality: Hong Kong
Country: HK

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 31:3e:d3:af:d7:2e:04:2a:1f:e7:a2:e3:fb:63:94:bd:a9:dc:c8:25
Serial Number (int): 281141634500445797114817629627059667357757392933
Serial Number Length: 158 bits, 20 octets

Subject Key Identifier: fb:97:c0:c9:89:6e:76:dc:7c:7b:84:23:d9:6f:bc:d8:32:70:a2:d1
Authority Key Identifier: 92:37:b0:70:9c:8e:79:db:b3:19:13:b8:9b:a5:32:c0:b7:d6:27:62

Fingerprint (SHA-1): 8c:f0:de:6c:a8:17:dc:e3:00:3c:59:17:3f:85:7c:21:1c:1d:74:46
Fingerprint (SHA-256): 51:36:95:74:59:88:58:7f:dc:e8:91:3a:1c:bf:8c:57:36:da:56:c5:72:a4:61:1f:54:f5:03:36:4c:11:8e:29

Issuing Certificate URL: http://www1.eCert.gov.hk/root/ecert_ssl_ca_3-17.crt

Revocation Information

OCSP Server: http://ocsp1.eCert.gov.hk
CRL Distribution Point: http://crl1.eCert.gov.hk/crl/eCertSCA3-17CRL1.crl

Check the revocation status for certificate www.certizen.com
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.certizen.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.certizen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymdfUwy1gjTTLzI/lYzL
irfBET/TToVa/ikVNPCAINEWUmTvhv+Te7nrJ7WJh9zsIq4TTh/SGwLFpwhNDMLh
K6S8FZ899270z4vBQA4d5VTb+2PvW1RtaRS8P9F2iO/nEExSCOwT+dv2jzn3rUy7
VK1EXRrkZSz7PisghC3yQLkBKY+dYL5qPbXkY3tuSTnFTpSSWyvuORc4zdb2hOUx
PGJYTftAL+UmgFy3CfGNpzzIjPPCuCMRh3RfwF6C48EsYe3UISktvASR55HyI276
/Wn82wmebEsgKJMJuhP7K057wELDBIWufL+AJo5MqthGuZ+mQvqbXHmRwGst4JBc
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281141634500445797114817629627059667357757392933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hongkong Post'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hongkong Post e-Cert SSL CA 3 - 17'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 07:09:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 09:58:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CERTIZEN LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.certizen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25551112414203761636149323734411721454877379871373802948154914326135781459771009938288239251326946748558841551423644369702548734628856318477787977667684173297785747907330219350507675351261121170564971710378795477906206690580979406950519531538190042428136421743370733574235377426071770593204250400797707006631054583771459163213381750394111716939977217968498240540722481425144933239352169339767047914420812430205925921724662208986463571014248631524085928886774485045678230972118775006430829613535502962539158941477111468278783674129731650087935800788856642193316997550222772455456280385492317036138936698391184135970001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.16030.1.7.20
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certizen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certizen.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www1.eCert.gov.hk/root/ecert_ssl_ca_3-17.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.eCert.gov.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9237b0709c8e79dbb31913b89ba532c0b7d62762
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.eCert.gov.hk/crl/eCertSCA3-17CRL1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb97c0c9896e76dc7c7b8423d96fbcd83270a2d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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