OV SSL/TLS Certificate for satert.ey.net Issued to Ernst & Young Nederland LLP

Certificate is witin its validity period

Issued by SSL Corporation (Entrust OV TLS Issuing RSA CA 1)

About the satert.ey.net OV SSL/TLS Certificate

This certificate with serial number 1e:a4:a9:81:ef:3f:c9:82:17:d3:20:23:03:0b:d8:f1 for satert.ey.net was issued on by SSL Corporation.

This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for satert.ey.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SSL Corporation

Organization: SSL Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 1e:a4:a9:81:ef:3f:c9:82:17:d3:20:23:03:0b:d8:f1
Serial Number (int): 40731814580047200659988140520903530737
Serial Number Length: 125 bits, 16 octets

Subject Key Identifier: 76:83:28:99:21:fc:27:98:4e:98:16:58:36:a1:6a:f7:ee:31:30:da
Authority Key Identifier: 68:0d:45:ca:35:c2:e7:9a:1b:f0:b3:84:dd:d5:da:7f:0b:89:c1:11

Fingerprint (SHA-1): b0:c7:8d:1c:41:7f:a4:8f:54:ba:67:ec:f9:1a:cb:66:97:29:c3:1f
Fingerprint (SHA-256): 19:3b:6d:0b:8c:c6:4e:58:89:ca:80:75:3d:7d:2a:23:4d:a6:0f:87:29:06:78:72:be:54:36:76:3f:d5:38:f7

Issuing Certificate URL: http://cert.ssl.com/Entrust-OVTLS-I-R1.cer

Revocation Information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/Entrust-OVTLS-I-R1.crl

Check the revocation status for certificate satert.ey.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for satert.ey.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

satert.ey.net

X.509 Certificate

The complete raw X.509 certificate details for satert.ey.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoxY+8GERo9Z3uHkxT37
x2d1thaSwGerZnMzGxHqWKWH8SoOMqxQJ+LEBaG3TIcoXv3tbKJBFvf7Fvvig7CS
foRzhQ5oeW/qM59YpSGcfKWzmprNoXwLMPy9umHtncy4D2g8emIbheP4rRhhn1nL
55FdZnSSM+mBmvi5Psycm9mQ4b+iptX6jnpzFO0XzNdjYylPZFnTpO3mFYQj49lD
Dl8v/IaG23/617yc2Z3iK/7iU+KR9OPvhaeo8JMK8FmmXqTiejiafWCUDkbDZu4B
AJbvEYtX9GYuZGiRkksg5LwAZ/JyvAOU54yQPdyxzHFfz3gFOda43+jIfBJARmJf
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40731814580047200659988140520903530737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Entrust OV TLS Issuing RSA CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 03:50:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-03 04:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'satert.ey.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18500000501825167179712289137520940080297405766069970080010918516568137055856830919546390610749522401405079270326978309666896249025052489276300775430857823571692951472562823827946625043697420544600054944487872880053368952792415855207599336640382195198112370043901307657267585390973215472310176579185523419044880241271609137490459779165066647208752891326258816922482790973173800273280273650918663493943083668320408979691030130344929559147517208457679071090818972495385237024854059178844852100455285950012611011042986937169114226861534337217332546018044864037954621982484053928480510833908563265163127528005208746647541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 680d45ca35c2e79a1bf0b384ddd5da7f0b89c111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/Entrust-OVTLS-I-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satert.ey.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/Entrust-OVTLS-I-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7683289921fc27984e98165836a16af7ee3130da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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