huetech.io
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0d:81:2e:d4:05:55:dd:cf:41:f3:38:6f:84:ff:82:a6 was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=huetech.io
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:81:2e:d4:05:55:dd:cf:41:f3:38:6f:84:ff:82:a6Serial Number (int): 17950720028818351322703907571363709606
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 45:3c:a6:c3:4b:fb:bb:63:61:5c:38:1b:ae:0a:23:5e:69:be:bb:41
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 67:aa:25:2d:14:06:f3:6c:cd:ed:f9:76:0e:5b:4e:44:d0:88:b9:47
Fingerprint (sha256): fc:36:79:b1:db:f8:8c:8d:4a:23:e2:49:0f:ec:5f:e6:d0:03:8f:d5:5f:39:f5:1a:9f:71:80:c2:d3:e8:74:97
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate huetech.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for huetech.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
huetech.io
Other certificates including the domain name huetech.io
(limited to 100 certificates)
Certificate
The complete raw certificate details for huetech.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHhDCCBWygAwIBAgIQDYEu1AVV3c9B8zhvhP+CpjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMxMDIwMDAwMDAwWhcNMjQwNDIwMjM1OTU5WjAVMRMwEQYDVQQDEwpodWV0ZWNo LmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVMid7IXYBoDCM0e e64fDFtzA96mQuENVgT8oK79R2gLjWnEPHymX8d5LydxoF0A+nPg3pKoYfq60ORC bDG7VAU+pnJ+V/XUC/mNYXwGzasSzuHajdXv1RacdD/C4fizbKak/KFna2XEzDOF jX1DRYAqiNAv/jlqtlhL5aNiDh6u3TJdmDBLGA/AKSUvgObud1j8U3ug2ubcp+Oi /8LkpUkCcTWBH6wM6HcDKlJdF1gAVRSAVVqWGlHnqGWNThZcr+3tqbIX+zzA8nHJ KxbuePDQtogEy/UX7mHeF7woKmi7b7qrFbDlwmdnAi+IF8AKF+P+0jpyFWjNMpCk cwQg1QIDAQABo4IDhzCCA4MwHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEqIAS4 ZiMwHQYDVR0OBBYEFEU8psNL+7tjYVw4G64KI15pvrtBMBUGA1UdEQQOMAyCCmh1 ZXRlY2guaW8wPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0 cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNI QTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v R2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwgYcGCCsG AQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t MFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1 c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcnQwDAYDVR0TAQH/BAIw ADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGLTjv7hAAABAMASDBGAiEAzxCoVeGQz9qAsnv7imyt 0cMHmlwzq/UVWp3M3sXwFXMCIQCyPshwcdUsdn1p55tAN/kQaDK0YgeOcvDtI1ug Sa7rPAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi047+0gA AAQDAEcwRQIhAKMPP2jlMDfeg+pLSb6MrXg7ZsH0grIlXXiImRY5mrg5AiAafDOT Hp3QqLH5hh3QTALp7ExhuxMLnHAy7BgQ8Yx+kQB2ANq2v2s/tbYin5vCu1xr6HCR cWy7UYSFNL2kPTBI1/urAAABi047+zoAAAQDAEcwRQIgKotdIZMhcxgk80EgSfeB bpUSldwvfUr2lWuCOPlSDZsCIQDLmWzHHQauC44RKffXAfYkS0k/pK5/vTle2pcP YIn8ozANBgkqhkiG9w0BAQsFAAOCAgEADU26e0Z6oTJJ6fGwo2FDJ/L+FUIdxmlm 1AndPgLCyicFFVzOOzUPHwQuDi0MeswwbupaG2Bk+3ekJbGvpaB5y7PUg36Rx17f TocqQaCd0tgHCIRooPh/SMPCGZpeGH2ImmHJ4sJiCD1QF99h4W8BihL05Ht2B5cd 04UFAlAPw8alu6v6CfO13ueb4PMMedSUNCVv7KUXwDpPtFuGTP0OkKZQPqAyQRPb mN35SM7+pCqW4THjLY37atNV4t3oGRpdLYEzEasmhlqMz3FmYorXSECLqJHx28NQ 3+9MlDvq8xwJ5KX1BGiSE4/AxxGWZS8WwN+xWDgA7B9g2OkaFsH6Tm9QEVCeqD4G q1e6xZFi+Nsh0CQOPV1Hn/K64ODoiwcYGNqX5sN/SwgZNC7/qbEH8rmiT1DiFCrh QWvgfm4YEv0gGzvsn1s+VXUjlZjDU5ote5EkKkq86MWsdzjugylTu5aEDJpLxASN 8NlQrZkMJPN5975uDu5DXFXJtOyzXff6m+9RFEjEmx7yZpYiZto9Pghn1g46fTHd AZtqd6UO5ieDQ9iAryUXbfn/cyCXd6ZkxEaXuvj+Ei5sOmYxOOuBDQOKvL+bSvRm gXfvBBa3X5E2ozXMd/PW0CwOaVKZM8OKqTQZEj8Mvv0h8JxuEk4yH38Du/USTOrt OyQF0t3GsAc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVMid7IXYBoDCM0ee64f DFtzA96mQuENVgT8oK79R2gLjWnEPHymX8d5LydxoF0A+nPg3pKoYfq60ORCbDG7 VAU+pnJ+V/XUC/mNYXwGzasSzuHajdXv1RacdD/C4fizbKak/KFna2XEzDOFjX1D RYAqiNAv/jlqtlhL5aNiDh6u3TJdmDBLGA/AKSUvgObud1j8U3ug2ubcp+Oi/8Lk pUkCcTWBH6wM6HcDKlJdF1gAVRSAVVqWGlHnqGWNThZcr+3tqbIX+zzA8nHJKxbu ePDQtogEy/UX7mHeF7woKmi7b7qrFbDlwmdnAi+IF8AKF+P+0jpyFWjNMpCkcwQg 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17950720028818351322703907571363709606 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'huetech.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18345549438438210800109747250601388685603349635731559470986970906559132335523922779753707865609042922793717461505369888893291521262675070667649049959672846547353883810847039600906249545516482715460930805852225459419770586206562633761222709761638467643274238664373801687598865573212375911400184542744075098151310053945628731440831121792685675852788602177551179399308838280961842713432443033792571737485311565867975189405125447846968822518897698039492022204241129405592648979626065074473722849000597609848526472138348941106973412032951653475401062862102628083032688740589974169230812788031440066693434981117963788361941 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 453ca6c34bfbbb63615c381bae0a235e69bebb41 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huetech.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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