OV SSL/TLS Certificate for eyprism.ey.net Issued to Ernst & Young Nederland LLP

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the eyprism.ey.net OV SSL/TLS Certificate

This certificate with serial number 2b:e4:de:86:74:ef:d9:e4:1a:0e:89:e3:ad:11:8a:9d for eyprism.ey.net was issued on by SSL Corporation.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for eyprism.ey.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 2b:e4:de:86:74:ef:d9:e4:1a:0e:89:e3:ad:11:8a:9d
Serial Number (int): 58345160850193334187849956149024623261
Serial Number Length: 126 bits, 16 octets

Subject Key Identifier: 79:34:84:8e:c6:4a:10:66:23:5d:1a:e8:74:03:ab:1d:05:ce:0e:80
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): db:39:7a:2d:2a:eb:d7:8a:9d:b6:f1:5a:61:e1:c9:b2:fd:01:d1:df
Fingerprint (SHA-256): 45:b2:3a:ea:d5:73:27:93:bc:aa:d9:53:06:7b:57:c0:2e:4e:0b:06:5f:40:9c:ff:19:be:97:e0:be:02:ee:c7

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate eyprism.ey.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for eyprism.ey.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

eyprism.ey.net

X.509 Certificate

The complete raw X.509 certificate details for eyprism.ey.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaIhv6RaGu+8iuK/I+dE
t3SO5PLCEABocok2HmZkrwzzALC2VPfdie+1OmIoqsjF+wKdxoqxtcstTTG6z32o
hsAcO4e2xhwoOnGBSjTqHjTHrNdMpJSdQir2nIuUk5x5aPbtyO5aSbs347RHXqsD
zfnk6NJ8aygQs6T7q8Phc/+piGgc7o3vF9q3MzgtE8OAnF2omtW6hKgPiE8sOIpI
1AzNvvwhd/IpEP9GF3Gxe4FERiCN+w6UTV2VjA2n6KqVwBN8a/7qKFWq3hqJCNe5
cU+gl9floWH6xbXAbhxRAiaLqRzchWxxmUcaAN2rWcDnAxitB18yP5bCFIBfX/uj
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58345160850193334187849956149024623261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 03:50:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-03 04:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eyprism.ey.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24948896263704914508651224224548114431848425707456073792945190767294418437798585026343147467417010867787401640384247821894303113324670459968880124012970763445621652874829807049586474898083954832855220956871205713337055887764916855931206971489090449211386033727705357206828190520997177925938369475061658923950929976815557749277300666078903866505935621558610751053437359291127099669630610474134282243762074744584727461195689554892312296240072691249986877246738720651013642491381798324149607467976386161586517921198289304803436543848785206945737394769613404946605378603253733381369933333899744606156985693859553874781073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyprism.ey.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7934848ec64a1066235d1ae87403ab1d05ce0e80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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