# CA Owner Audit Dump - Microsec Ltd.

Generated: 2026-07-28T08:33:46.901016Z

## CA Owner Summary

- Name: Microsec Ltd.
- Country: Hungary
- Website: -
- Problem Reporting: info[at]e-szigno[dot]hu, https://e-szigno.hu/security-events-report
- CP/CPS URLs: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf, https://github.com/microsec/regulations/releases/download/v3.20/hrsz--all--ssl--EN.md, http://srv.e-szigno.hu/menu/index.php?lap=english_dokszab, http://www.e-szigno.hu/docs/szsz--hsz--altalanos--v2.0.pdf, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ssl/eng
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_SMIME-BR_v10_ds.pdf, http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
- Root Programs: {"mozilla":"Not Yet Included","chrome":"Not Included","microsoft":"Included","apple":"Not Included"}

## Owner Disclosure Snapshot

- Problem reporting mechanism: info[at]e-szigno[dot]hu, https://e-szigno.hu/security-events-report
- CP/CPS URLs: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf, https://github.com/microsec/regulations/releases/download/v3.20/hrsz--all--ssl--EN.md, http://srv.e-szigno.hu/menu/index.php?lap=english_dokszab, http://www.e-szigno.hu/docs/szsz--hsz--altalanos--v2.0.pdf, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ssl/eng
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_SMIME-BR_v10_ds.pdf, http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
- Repository URLs: https://e-szigno.hu/documents-and-policies
- Root programs: {"mozilla":"Not Yet Included","chrome":"Not Included","microsoft":"Included","apple":"Not Included"}
- Contact aliases: -

## Certificate Inventory

| # | Subject | CA | Lifecycle | Validity | Policies | pathLen | EKU | zlint |
|---|---|---|---|---|---|---|---|---|
| 1 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning Root CA 2024 | yes | unknown | 2024-07-15 to 2039-07-14 | - | - | - | clean |
| 2 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC Client Root CA 2026 | yes | unknown | 2026-06-03 to 2041-06-03 | - | - | - | current errors: 1 |
| 3 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC TSA Root CA 2024 | yes | unknown | 2024-07-15 to 2039-07-14 | - | - | - | current errors: 1 |
| 4 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017 | yes | unknown | 2017-08-22 to 2042-08-22 | - | - | - | clean |
| 5 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA Client Root CA 2026 | yes | unknown | 2026-06-03 to 2041-06-03 | - | - | - | clean |
| 6 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025 | yes | unknown | 2025-07-30 to 2040-07-29 | - | - | - | clean |
| 7 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SMIME Root CA 2024 | yes | unknown | 2024-07-15 to 2042-07-14 | - | - | - | current errors: 1 |
| 8 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023 | yes | unknown | 2023-07-17 to 2038-07-17 | - | - | - | clean |
| 9 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024 | yes | unknown | 2024-07-15 to 2039-07-14 | - | - | - | current errors: 1 |
| 10 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TSA Root CA 2024 | yes | unknown | 2024-07-15 to 2039-07-14 | - | - | - | clean |
| 11 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA | yes | expired | 2005-04-06 to 2017-04-06 | 1.3.6.1.4.1.21528.2.1.1.1 | - | - | clean |
| 12 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu | yes | unknown | 2009-06-16 to 2029-12-30 | - | - | - | clean |
| 13 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-06-16 to 2029-12-29 | 1.3.6.1.4.1.21528.2.1.1.21.2.1 | - | - | clean |
| 14 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 15 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-03-09 to 2038-01-17 | 1.3.6.1.4.1.21528.2.1.1.21.2.0 | - | - | clean |
| 16 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 17 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-06-16 to 2029-12-29 | 1.3.6.1.4.1.21528.2.1.1.21.2.1 | - | - | clean |
| 18 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-03-09 to 2038-01-17 | 1.3.6.1.4.1.21528.2.1.1.21.2.0 | - | - | clean |
| 19 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced Code Signing Class2 e-Szigno CA 2016 | yes | current | 2016-08-29 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 20 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced Code Signing Class3 e-Szigno CA 2016 | yes | current | 2016-06-22 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 21 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Advanced e-Szigno CA2 | yes | expired | 2005-05-25 to 2015-05-25 | 1.3.6.1.4.1.21528.2.1.1.8 | - | - | clean |
| 22 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Advanced e-Szigno CA3 | yes | expired | 2008-10-13 to 2015-05-25 | 1.3.6.1.4.1.21528.2.1.1.2 | - | - | clean |
| 23 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced eIDAS Class2 e-Szigno CA 2016 | yes | current | 2016-06-22 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 24 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 25 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-03-09 to 2038-01-17 | 1.3.6.1.4.1.21528.2.1.1.21.2.0 | - | - | clean |
| 26 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-06-16 to 2029-12-29 | 1.3.6.1.4.1.21528.2.1.1.21.2.1 | - | - | clean |
| 27 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 28 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Authentication e-Szigno CA4 | yes | expired | 2006-10-05 to 2016-10-05 | 1.3.6.1.4.1.21528.2.1.1.2 | - | - | clean |
| 29 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Class2 e-Szigno SSL CA 2016 | yes | current | 2016-08-29 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 30 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Class3 KET e-Szigno CA 2018 | yes | current | 2018-09-06 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 31 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 32 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2017 | yes | revoked | 2019-09-10 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing, OCSP Signing | historical errors: 1 |
| 33 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2017 | yes | revoked | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing | clean |
| 34 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2020 | yes | current | 2020-08-25 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing | clean |
| 35 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 36 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 37 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017 | yes | expired | 2023-08-24 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 38 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 39 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2017 | yes | revoked | 2019-09-10 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing, OCSP Signing | historical errors: 1 |
| 40 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2017 | yes | revoked | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing | clean |
| 41 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2020 | yes | current | 2020-08-25 to 2042-08-22 | 2.5.29.32.0 | - | Code Signing | clean |
| 42 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017 | yes | expired | 2023-08-24 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 43 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 44 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 45 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning CA 2024 | yes | current | 2024-07-31 to 2039-07-13 | 2.5.29.32.0 | - | Code Signing | clean |
| 46 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning TSA CA 2024 | yes | current | 2024-07-31 to 2039-07-13 | 2.5.29.32.0 | - | Time Stamping | clean |
| 47 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023 | yes | expired | 2023-07-19 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 48 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023 | yes | revoked, expired | 2024-07-31 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 1 |
| 49 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023 | yes | expired | 2023-07-19 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 50 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023 | yes | current | 2025-05-30 to 2028-05-29 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 51 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 52 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 53 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 54 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 55 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno ECC Client CA 2026 | yes | current | 2026-06-04 to 2041-06-02 | 2.5.29.32.0 | - | TLS Web Client Authentication | clean |
| 56 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC CodeSigning TSA CA 2024 | yes | current | 2024-07-31 to 2039-07-13 | 2.5.29.32.0 | - | Time Stamping | clean |
| 57 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017 | yes | expired | 2023-08-24 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 58 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 59 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 60 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023 | yes | current | 2025-05-30 to 2028-05-29 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 61 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023 | yes | expired | 2023-07-19 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 62 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023 | yes | expired | 2023-07-19 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 63 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023 | yes | revoked, expired | 2024-07-31 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 1 |
| 64 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 65 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 66 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 67 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 68 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Pseudonymous CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 69 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 70 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified Organization CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 71 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified Pseudonymous CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 72 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified QCP CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 73 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023 | yes | current | 2024-07-31 to 2042-07-13 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 74 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 75 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023 | yes | current | 2023-09-18 to 2042-08-21 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 76 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023 | yes | expired | 2023-09-18 to 2025-12-30 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 77 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018 | yes | current | 2018-07-31 to 2042-08-22 | 2.5.29.32.0 | - | - | clean |
| 78 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018 | yes | expired | 2023-08-24 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 79 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 80 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | current errors: 1 |
| 81 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023 | yes | expired | 2023-07-19 to 2025-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 82 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023 | yes | expired | 2023-07-19 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | clean |
| 83 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023 | yes | current | 2025-05-30 to 2028-05-29 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 84 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023 | yes | revoked, expired | 2024-07-31 to 2026-07-18 | 2.5.29.32.0 | - | TLS Web Server Authentication, TLS Web Client Authentication | historical errors: 1 |
| 85 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 86 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2025 | yes | current | 2025-01-06 to 2028-01-05 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 87 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 88 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA Client CA 2026 | yes | current | 2026-06-04 to 2041-06-02 | 2.5.29.32.0 | - | TLS Web Client Authentication | clean |
| 89 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA DV TLS CA 2025 | yes | current | 2025-07-30 to 2028-07-29 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 90 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA DV TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 91 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA OV TLS CA 2025 | yes | current | 2025-07-30 to 2028-07-29 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 92 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA OV TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 93 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA Qualified TLS CA 2026 | yes | current | 2026-03-18 to 2029-03-17 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 94 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025 | yes | current | 2026-07-22 to 2038-07-16 | 2.5.29.32.0 | - | TLS Web Server Authentication | not_available |
| 95 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025 | yes | current | 2025-07-30 to 2029-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication | clean |
| 96 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023 | yes | expired | 2023-07-19 to 2025-12-30 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 97 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023 | yes | current | 2024-07-31 to 2042-07-13 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 98 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023 | yes | current | 2025-02-12 to 2028-02-12 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 99 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023 | yes | current | 2023-07-19 to 2042-08-21 | 2.5.29.32.0 | - | E-mail Protection | clean |
| 100 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SSL CA, emailAddress=info@e-szigno.hu | yes | expired | 2011-09-13 to 2017-04-05 | 2.5.29.32.0 | - | - | clean |
| 101 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SSL CA 2014, emailAddress=info@e-szigno.hu | yes | current | 2014-07-08 to 2029-12-29 | 2.5.29.32.0 | - | - | current errors: 1 |
| 102 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023 | yes | current | 2026-03-18 to 2029-12-30 | 2.5.29.32.0 | - | TLS Web Server Authentication | current errors: 1 |
| 103 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017 | yes | current | 2017-09-17 to 2042-08-22 | 2.5.29.32.0 | - | Time Stamping | clean |
| 104 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017 | yes | revoked | 2019-09-10 to 2042-08-22 | 2.5.29.32.0 | - | Time Stamping, OCSP Signing | historical errors: 1 |
| 105 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017 | yes | revoked | 2019-09-10 to 2029-09-29 | 2.5.29.32.0 | - | Time Stamping, OCSP Signing | historical errors: 1 |
| 106 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2020 | yes | current | 2020-08-25 to 2029-09-29 | 2.5.29.32.0 | - | Time Stamping | clean |
| 107 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2020 | yes | current | 2020-08-25 to 2042-08-22 | 2.5.29.32.0 | - | Time Stamping | clean |
| 108 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2026 | yes | current | 2026-06-04 to 2042-08-21 | 2.5.29.32.0 | - | Time Stamping | clean |
| 109 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Encryption e-Szigno CA5 | yes | expired | 2006-10-05 to 2016-10-05 | 1.3.6.1.4.1.21528.2.1.1.2 | - | - | clean |
| 110 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-03-06 to 2038-01-18 | 1.3.6.1.4.1.21528.2.1.1.1.5.0 | - | - | clean |
| 111 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-06-16 to 2029-12-30 | 1.3.6.1.4.1.21528.2.1.1.1.5.1 | - | - | clean |
| 112 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Server CA | yes | expired | 2005-04-15 to 2015-04-15 | 1.3.6.1.4.1.21528.2.1.1.1 | - | - | clean |
| 113 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Online e-Szigno SSL CA 2016 | yes | current | 2016-08-29 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 114 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Qualified e-Szigno CA | yes | expired | 2005-04-09 to 2015-04-09 | 1.3.6.1.4.1.21528.2.1.1.1 | - | - | clean |
| 115 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-03-09 to 2038-01-17 | 1.3.6.1.4.1.21528.2.1.1.1.5.0 | - | - | clean |
| 116 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-06-16 to 2029-12-29 | 1.3.6.1.4.1.21528.2.1.1.1.5.1 | - | - | clean |
| 117 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 118 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Qualified e-Szigno Organization CA 2016 | yes | current | 2016-08-29 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 119 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Qualified e-Szigno PCA | yes | expired | 2005-06-14 to 2015-06-14 | 1.3.6.1.4.1.21528.2.1.1.1 | - | - | clean |
| 120 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno QCP CA 2012, emailAddress=info@e-szigno.hu | yes | current | 2012-03-30 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 121 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Qualified e-Szigno TLS CA 2018 | yes | current | 2018-07-31 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 122 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Qualified KET e-Szigno CA 2018 | yes | current | 2018-09-06 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |
| 123 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-06-16 to 2029-12-29 | 1.3.6.1.4.1.21528.2.1.1.1.5.1 | - | - | clean |
| 124 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | revoked | 2009-03-09 to 2038-01-17 | 1.3.6.1.4.1.21528.2.1.1.1.5.0 | - | - | clean |
| 125 | countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu | yes | current | 2009-12-02 to 2029-12-29 | 2.5.29.32.0 | - | - | clean |

## Certificate Details

### e-Szigno CodeSigning Root CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning Root CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning Root CA 2024
- Serial: 0104827C5414258F9A0FB8C20A
- SHA-256: 5AF98353650C2AC49961F51883600AE5C61101035CDD7782822322127FACEC6D
- SPKI SHA-256: CAA50B6F33A23A607652533FA1E1FA4683A09E4D125CE4CDBC338533F971FBA7
- Validity: 2024-07-15 to 2039-07-14
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/csrootca2024.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:04:82:7c:54:14:25:8f:9a:0f:b8:c2:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno CodeSigning Root CA 2024
        Validity
            Not Before: Jul 15 08:44:28 2024 GMT
            Not After : Jul 14 08:44:28 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno CodeSigning Root CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                85:42:05:43:75:91:B5:5C:4D:23:31:2C:E9:AA:F4:B2:BC:5F:9A:A1
            X509v3 Authority Key Identifier:
                85:42:05:43:75:91:B5:5C:4D:23:31:2C:E9:AA:F4:B2:BC:5F:9A:A1
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 5AF98353650C2AC49961F51883600AE5C61101035CDD7782822322127FACEC6D
    SPKI SHA256: CAA50B6F33A23A607652533FA1E1FA4683A09E4D125CE4CDBC338533F971FBA7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno ECC Client Root CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC Client Root CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC Client Root CA 2026
- Serial: 661A588C8F80D2DFA038
- SHA-256: C7BC8A2EDA3A3892C37EFC6CA69C3E0FF8E5EF6ECE284C38DB3B36571340B970
- SPKI SHA-256: BF1C2AB697FB535F60E7E9B1B989EFF65A89AF076BBAB3E746A82898767D1944
- Validity: 2026-06-03 to 2041-06-03
- Key: EC 521 secp521r1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://eclientrootca2026-crl.e-szigno.hu/eclientrootca2026.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1a:58:8c:8f:80:d2:df:a0:38
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC Client Root CA 2026
        Validity
            Not Before: Jun  3 17:15:00 2026 GMT
            Not After : Jun  3 16:14:59 2041 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC Client Root CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:DF:2C:36:79:4C:0E:44:78:A0:45:27:E8:93:DE:66:A0:AF:7F:10
            X509v3 Authority Key Identifier:
                3C:DF:2C:36:79:4C:0E:44:78:A0:45:27:E8:93:DE:66:A0:AF:7F:10
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: C7BC8A2EDA3A3892C37EFC6CA69C3E0FF8E5EF6ECE284C38DB3B36571340B970
    SPKI SHA256: BF1C2AB697FB535F60E7E9B1B989EFF65A89AF076BBAB3E746A82898767D1944
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno ECC TSA Root CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC TSA Root CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC TSA Root CA 2024
- Serial: 0105EF49693485A289EAF95F0A
- SHA-256: 814934F610FBF7B8579DCA297D3EBB3F667F4958E18CDCA75848DE0E4C9CCF7F
- SPKI SHA-256: EA9753CC85BE1A39910E3D1181C24AC07DE9CBB61511D799DDDBFD4BD6F040E5
- Validity: 2024-07-15 to 2039-07-14
- Key: EC 384 secp384r1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/etsarootca2024.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:05:ef:49:69:34:85:a2:89:ea:f9:5f:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC TSA Root CA 2024
        Validity
            Not Before: Jul 15 08:45:35 2024 GMT
            Not After : Jul 14 08:45:35 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC TSA Root CA 2024
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                BB:F9:32:F1:4E:17:68:D4:9F:50:79:64:7B:72:EB:41:AF:06:AA:2E
            X509v3 Authority Key Identifier:
                BB:F9:32:F1:4E:17:68:D4:9F:50:79:64:7B:72:EB:41:AF:06:AA:2E
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 814934F610FBF7B8579DCA297D3EBB3F667F4958E18CDCA75848DE0E4C9CCF7F
    SPKI SHA256: EA9753CC85BE1A39910E3D1181C24AC07DE9CBB61511D799DDDBFD4BD6F040E5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno Root CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 015448EF21FD97590DF5040A
- SHA-256: BEB00B30839B9BC32C32E4447905950641F26421B15ED089198B518AE2EA1B99
- SPKI SHA-256: 42431627EA76CC78697F915E3455B1B2EC82FF2F6380EE6423EF3C0840B7E631
- Validity: 2017-08-22 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_SMIME-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/rootca2017.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Included","microsoft":"Included","mozilla":"Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:54:48:ef:21:fd:97:59:0d:f5:04:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Aug 22 12:07:06 2017 GMT
            Not After : Aug 22 12:07:06 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: BEB00B30839B9BC32C32E4447905950641F26421B15ED089198B518AE2EA1B99
    SPKI SHA256: 42431627EA76CC78697F915E3455B1B2EC82FF2F6380EE6423EF3C0840B7E631
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno RSA Client Root CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA Client Root CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA Client Root CA 2026
- Serial: E96CD0BB4854DC81531A
- SHA-256: FE7EABC63C12633F87600E46B4B5A8769382DC63BB35F513F3048B6FD430F5B9
- SPKI SHA-256: 56DAA02AC531125C6D608CB0E0C9ED0882EA78511A9A39B1507C645C2582183D
- Validity: 2026-06-03 to 2041-06-03
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://rclientrootca2026-crl.e-szigno.hu/rclientrootca2026.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e9:6c:d0:bb:48:54:dc:81:53:1a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA Client Root CA 2026
        Validity
            Not Before: Jun  3 17:15:00 2026 GMT
            Not After : Jun  3 16:14:59 2041 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA Client Root CA 2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:43:8E:C7:E8:CA:94:C9:F0:E5:41:3B:0C:05:91:8D:84:D7:12:AB
            X509v3 Authority Key Identifier:
                5E:43:8E:C7:E8:CA:94:C9:F0:E5:41:3B:0C:05:91:8D:84:D7:12:AB
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: FE7EABC63C12633F87600E46B4B5A8769382DC63BB35F513F3048B6FD430F5B9
    SPKI SHA256: 56DAA02AC531125C6D608CB0E0C9ED0882EA78511A9A39B1507C645C2582183D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno RSA TLS Root CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 013027F17B7509FE78E2BAF10A
- SHA-256: A01C4F8F68112FA9DAC50B96809A791480168C8ACB9E51C5482D8D3819688557
- SPKI SHA-256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
- Validity: 2025-07-30 to 2040-07-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://github.com/microsec/regulations/releases/download/v3.20/hrsz--all--ssl--EN.md
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:27:f1:7b:75:09:fe:78:e2:ba:f1:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Jul 30 15:10:00 2025 GMT
            Not After : Jul 29 15:09:59 2040 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: A01C4F8F68112FA9DAC50B96809A791480168C8ACB9E51C5482D8D3819688557
    SPKI SHA256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno SMIME Root CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SMIME Root CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SMIME Root CA 2024
- Serial: 0107DAF87E88C72636131EEC0A
- SHA-256: 7A422EC237B4DA7D326C232278F6DBE329B0C9ED5A56AAFCC110A8BC83ED0A96
- SPKI SHA-256: 22CD5DF2BF3211232B7EE0065FAEA7E570FF8DE5BEA6333C9AB8B6F360ABE8E1
- Validity: 2024-07-15 to 2042-07-14
- Key: EC 384 secp384r1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_SMIME-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/esmimerootca2024.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:07:da:f8:7e:88:c7:26:36:13:1e:ec:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SMIME Root CA 2024
        Validity
            Not Before: Jul 15 08:49:34 2024 GMT
            Not After : Jul 14 08:49:34 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SMIME Root CA 2024
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                06:66:F3:4B:7C:3F:6B:C2:BB:D9:43:E7:99:BA:C1:29:61:5B:8C:F1
            X509v3 Authority Key Identifier:
                06:66:F3:4B:7C:3F:6B:C2:BB:D9:43:E7:99:BA:C1:29:61:5B:8C:F1
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 7A422EC237B4DA7D326C232278F6DBE329B0C9ED5A56AAFCC110A8BC83ED0A96
    SPKI SHA256: 22CD5DF2BF3211232B7EE0065FAEA7E570FF8DE5BEA6333C9AB8B6F360ABE8E1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno TLS Root CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: E86F187BD6396B984A49980A
- SHA-256: B49141502D00663D740F2E7EC340C52800962666121A36D09CF7DD2B90384FB4
- SPKI SHA-256: 47487900A1BEB9EE08CCBC1116A8EC55F454B638994319F051B984023CED6423
- Validity: 2023-07-17 to 2038-07-17
- Key: EC 521 secp521r1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://github.com/microsec/regulations/releases/download/v3.20/hrsz--all--ssl--EN.md
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/tlsrootca2023.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Included","microsoft":"Included","mozilla":"Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e8:6f:18:7b:d6:39:6b:98:4a:49:98:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Jul 17 14:00:00 2023 GMT
            Not After : Jul 17 14:00:00 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: B49141502D00663D740F2E7EC340C52800962666121A36D09CF7DD2B90384FB4
    SPKI SHA256: 47487900A1BEB9EE08CCBC1116A8EC55F454B638994319F051B984023CED6423
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno TLS Root CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 010331734554D243B46CADAA0A
- SHA-256: 328CDF63622AFB8A3FBC1347FD3389F918DA4A33F80AF34522D34B5BDA9CCB82
- SPKI SHA-256: 74CFED817E8DF5C2E4BE0694CA4DDD0C2F9E199F070A9642A0C3AAF5A2EF65C7
- Validity: 2024-07-15 to 2039-07-14
- Key: EC 384 secp384r1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://github.com/microsec/regulations/releases/download/v3.20/hrsz--all--ssl--EN.md
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/etlsrootca2024.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Not Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:31:73:45:54:d2:43:b4:6c:ad:aa:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jul 15 08:42:19 2024 GMT
            Not After : Jul 14 08:42:19 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 328CDF63622AFB8A3FBC1347FD3389F918DA4A33F80AF34522D34B5BDA9CCB82
    SPKI SHA256: 74CFED817E8DF5C2E4BE0694CA4DDD0C2F9E199F070A9642A0C3AAF5A2EF65C7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### e-Szigno TSA Root CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TSA Root CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TSA Root CA 2024
- Serial: 010669B7A9148D4A558862110A
- SHA-256: 3D4FB84E009C3A6EDC4389DFE9BE9A22391DBD9ABA19417D0D2A9BA102F0BCC8
- SPKI SHA-256: CD92A44F4749105001AD8E720C11A71F8694DFD67CB8B50D589778FE3C4508BA
- Validity: 2024-07-15 to 2039-07-14
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/tsarootca2024.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Included","mozilla":"Not Yet Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:06:69:b7:a9:14:8d:4a:55:88:62:11:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TSA Root CA 2024
        Validity
            Not Before: Jul 15 08:46:49 2024 GMT
            Not After : Jul 14 08:46:49 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TSA Root CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                8B:FC:3B:CE:03:E9:1E:42:D8:6D:C8:9B:82:CC:BE:93:6E:11:94:23
            X509v3 Authority Key Identifier:
                8B:FC:3B:CE:03:E9:1E:42:D8:6D:C8:9B:82:CC:BE:93:6E:11:94:23
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 3D4FB84E009C3A6EDC4389DFE9BE9A22391DBD9ABA19417D0D2A9BA102F0BCC8
    SPKI SHA256: CD92A44F4749105001AD8E720C11A71F8694DFD67CB8B50D589778FE3C4508BA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Microsec e-Szigno Root CA

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: CCB8E7BF4E291AFDA2DC66A51C2C0F11
- SHA-256: 327A3D761ABADEA034EB998406275CB1A4776EFDAE2FDF6D0168EA1C4F5567D0
- SPKI SHA-256: 980922EEE07F86BC7F5E5E95D57DB8BDAE68E17A421C4E72A96A708A87920124
- Validity: 2005-04-06 to 2017-04-06
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: http://srv.e-szigno.hu/menu/index.php?lap=english_dokszab, http://www.e-szigno.hu/docs/szsz--hsz--altalanos--v2.0.pdf
- CP/CPS same as parent: false
- Audit URLs: http://static.e-szigno.hu/docs/NMHH_supervision_2015.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/RootCA.crl
- Revocation status: -
- Browser status: {"apple":"Not Included","chrome":"Not Included","microsoft":"Disabled","mozilla":"Removed"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: -
- Currently valid: -
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cc:b8:e7:bf:4e:29:1a:fd:a2:dc:66:a5:1c:2c:0f:11
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Apr  6 12:28:44 2005 GMT
            Not After : Apr  6 12:28:44 2017 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Microsec e-Szign\xC3\xB3 Root CA/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Subject Key Identifier:
                C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 327A3D761ABADEA034EB998406275CB1A4776EFDAE2FDF6D0168EA1C4F5567D0
    SPKI SHA256: 980922EEE07F86BC7F5E5E95D57DB8BDAE68E17A421C4E72A96A708A87920124
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Microsec e-Szigno Root CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: C27E43044E473F19
- SHA-256: 3C5F81FEA5FAB82C64BFA2EAECAFCDE8E077FC8620A7CAE537163DF36EDBF378
- SPKI SHA-256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
- Validity: 2009-06-16 to 2029-12-30
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://static.e-szigno.hu/docs/hr--all--all--EN--v3.20.pdf, https://static.e-szigno.hu/docs/szsz--all--all--EN--v3.20.pdf
- CP/CPS same as parent: false
- Audit URLs: https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_standard_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_TLS-EV_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_SMIME-BR_v10_ds.pdf, https://www.hunguard.hu/wp-content/uploads/2025/12/Attestation_letter_011_CS-BR_v10_ds.pdf
- Audit same as parent: false
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/rootca2009.crl
- Revocation status: -
- Browser status: {"apple":"Included","chrome":"Included","microsoft":"Included","mozilla":"Included"}
- Certificate type: Root Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: -
- Currently valid: -
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c2:7e:43:04:4e:47:3f:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 11:30:18 2009 GMT
            Not After : Dec 30 11:30:18 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 3C5F81FEA5FAB82C64BFA2EAECAFCDE8E077FC8620A7CAE537163DF36EDBF378
    SPKI SHA256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: -
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_root_ca
- is_self_signed
- has_basic_constraints
- is_ca
- has_key_usage

### Advanced Class 2 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0D
- SHA-256: E33AC4E20F79D4B444A419148222DAE6445A74E03A5055D32847B8EADF1042DC
- SPKI SHA-256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
- Validity: 2009-06-16 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a2ca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 14:39:49 2009 GMT
            Not After : Dec 29 14:39:49 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 2 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.1
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                3E:B5:ED:F2:A3:25:28:E4:02:37:AB:16:C3:B5:FD:9C:80:BF:53:38
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: E33AC4E20F79D4B444A419148222DAE6445A74E03A5055D32847B8EADF1042DC
    SPKI SHA256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Class 2 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 18
- SHA-256: C63543729A370C26952B47E1D1D1AEA84CB1B07F1B0F964C2FEDDC523FD7C795
- SPKI SHA-256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_bel/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a2ca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 2 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                3E:B5:ED:F2:A3:25:28:E4:02:37:AB:16:C3:B5:FD:9C:80:BF:53:38
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: C63543729A370C26952B47E1D1D1AEA84CB1B07F1B0F964C2FEDDC523FD7C795
    SPKI SHA256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Class 2 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 2 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 03
- SHA-256: FD79C5FEC4A95AFB531272F502F0643443205C0B91642C0B8C3E911D4F848D4A
- SPKI SHA-256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
- Validity: 2009-03-09 to 2038-01-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a2ca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  9 20:44:42 2009 GMT
            Not After : Jan 17 20:44:42 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 2 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.0
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                3E:B5:ED:F2:A3:25:28:E4:02:37:AB:16:C3:B5:FD:9C:80:BF:53:38
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: FD79C5FEC4A95AFB531272F502F0643443205C0B91642C0B8C3E911D4F848D4A
    SPKI SHA256: 4E57439FAF2A92872D807650B6B31A73EA35C1ADE30A26C4DE453A514B110A49
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Class 3 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 19
- SHA-256: B0A6EF0350E7C4C6056BEEA7AF9D2D860B9ED102137B9729D3C23216D195546A
- SPKI SHA-256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a3ca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 3 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                26:B7:18:01:AC:9C:78:EF:C0:A5:87:C0:0D:3F:3C:9A:F2:8B:45:81
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: B0A6EF0350E7C4C6056BEEA7AF9D2D860B9ED102137B9729D3C23216D195546A
    SPKI SHA256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Class 3 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0E
- SHA-256: A70AC512AB1C4F474750F14F9ADE3EFF39C036336E5D299F1179C7954F1E78C6
- SPKI SHA-256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
- Validity: 2009-06-16 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a3ca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 14:41:06 2009 GMT
            Not After : Dec 29 14:41:06 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 3 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.1
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                26:B7:18:01:AC:9C:78:EF:C0:A5:87:C0:0D:3F:3C:9A:F2:8B:45:81
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: A70AC512AB1C4F474750F14F9ADE3EFF39C036336E5D299F1179C7954F1E78C6
    SPKI SHA256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Class 3 e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Class 3 e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 04
- SHA-256: E275455E57A4EBD42FCCF26D048B64A9A88F3BA0E09CFF2ABA10B3437DCEFA10
- SPKI SHA-256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
- Validity: 2009-03-09 to 2038-01-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a3ca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  9 20:44:58 2009 GMT
            Not After : Jan 17 20:44:58 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Class 3 e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.0
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                26:B7:18:01:AC:9C:78:EF:C0:A5:87:C0:0D:3F:3C:9A:F2:8B:45:81
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: E275455E57A4EBD42FCCF26D048B64A9A88F3BA0E09CFF2ABA10B3437DCEFA10
    SPKI SHA256: 546B7E1D40F2EAA7B2D54A79658C9F5DA2C2FF5632F65E00BC9B071484170B98
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Code Signing Class2 e-Szigno CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced Code Signing Class2 e-Szigno CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 8D8DD221EED2535B843E1E0A
- SHA-256: A98C8CED93F9A43631ABE4573864E06C5192900723E97D1EED2C0D7C68B2D079
- SPKI SHA-256: C457585DBA5260E4DC2A6A45BD3781123509142BF1E9235A96D77D8ED0A0E7DE
- Validity: 2016-08-29 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/acs2ca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8d:8d:d2:21:ee:d2:53:5b:84:3e:1e:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 29 02:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Advanced Code Signing Class2 e-Szigno CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                C8:09:9A:BE:07:41:38:A5:26:68:D6:32:C0:82:0E:4A:FF:E6:5E:74
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: A98C8CED93F9A43631ABE4573864E06C5192900723E97D1EED2C0D7C68B2D079
    SPKI SHA256: C457585DBA5260E4DC2A6A45BD3781123509142BF1E9235A96D77D8ED0A0E7DE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Code Signing Class3 e-Szigno CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced Code Signing Class3 e-Szigno CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 8C55D86652702EF11B33AE0A
- SHA-256: 283CA6939530C1B5503915051936378AE36871967B03E4C2E7C243F14967DEB1
- SPKI SHA-256: 211A061D650C82B2233B9D723DC0E343B926D508D9C73E39B8E389A2EE88DA97
- Validity: 2016-06-22 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/acs3ca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8c:55:d8:66:52:70:2e:f1:1b:33:ae:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 22 10:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Advanced Code Signing Class3 e-Szigno CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                4E:4A:53:C4:D8:E0:7F:11:FC:86:04:79:E8:28:4A:E3:39:2B:86:7F
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 283CA6939530C1B5503915051936378AE36871967B03E4C2E7C243F14967DEB1
    SPKI SHA256: 211A061D650C82B2233B9D723DC0E343B926D508D9C73E39B8E389A2EE88DA97
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced e-Szigno CA2

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Advanced e-Szigno CA2
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: 6A8A267697A57BF6393BDA91DE7B6D02
- SHA-256: 338DC7BC10C41E40FE18D12C16FAC5244009A693C7BE226C0AA3F50A32EA9A99
- SPKI SHA-256: 432CDB4A03E4732747ECB2560172EB9FCEADF380582DEF317FEFAD2C01EF1922
- Validity: 2005-05-25 to 2015-05-25
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/ACA2.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.8
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://arca.e-szigno.hu/aocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8a:26:76:97:a5:7b:f6:39:3b:da:91:de:7b:6d:02
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: May 25 09:10:57 2005 GMT
            Not After : May 25 09:10:57 2015 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Advanced e-Szigno CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Fokozott e-Szign\xC3\xB3 CA2/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            Authority Information Access:
                OCSP - URI:https://arca.e-szigno.hu/aocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.8
                  CPS: http://www.e-szigno.hu/FSZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                68:C3:B4:DF:B1:01:BB:A3:03:B6:25:71:BA:CF:F8:FF:D1:4C:35:99
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 338DC7BC10C41E40FE18D12C16FAC5244009A693C7BE226C0AA3F50A32EA9A99
    SPKI SHA256: 432CDB4A03E4732747ECB2560172EB9FCEADF380582DEF317FEFAD2C01EF1922
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.8
- AIA OCSP: https://arca.e-szigno.hu/aocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Advanced e-Szigno CA3

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Advanced e-Szigno CA3
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: 6EAE653A2F285271079590CCB0F9BBD9
- SHA-256: 990481E5CCC1B7AD92575DEFE4414DB480EFC3311197E6936674749BBF0C85A5
- SPKI SHA-256: A2E8DF118AD2628F06C6C3EEB19E36775D91E6DDEDC7A733A59240EF55FAD72E
- Validity: 2008-10-13 to 2015-05-25
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/ACA3.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://www.e-szigno.hu/RootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:65:3a:2f:28:52:71:07:95:90:cc:b0:f9:bb:d9
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Oct 13 11:58:18 2008 GMT
            Not After : May 25 11:58:18 2015 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Advanced e-Szigno CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.2
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                22:94:A4:06:AB:7C:14:E4:CC:36:16:8B:99:86:34:C4:58:F0:2E:7A
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 990481E5CCC1B7AD92575DEFE4414DB480EFC3311197E6936674749BBF0C85A5
    SPKI SHA256: A2E8DF118AD2628F06C6C3EEB19E36775D91E6DDEDC7A733A59240EF55FAD72E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- AIA OCSP: -
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### Advanced eIDAS Class2 e-Szigno CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Advanced eIDAS Class2 e-Szigno CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 8B288ADD98AF791B02207F0A
- SHA-256: A29C104B100C3A7933473E62E4BE6371D653A1604D04EDAAD02C95806065CEE3
- SPKI SHA-256: 72705A4A20E38718B25EE52FA2404A1AD98083B21EA839D592B581BF04C1AC95
- Validity: 2016-06-22 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_bel/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/a2ca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8b:28:8a:dd:98:af:79:1b:02:20:7f:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 22 10:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Advanced eIDAS Class2 e-Szigno CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                6E:67:2D:51:E2:D9:BE:31:0F:E4:AF:DB:FC:95:8C:00:65:AE:0D:C1
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: A29C104B100C3A7933473E62E4BE6371D653A1604D04EDAAD02C95806065CEE3
    SPKI SHA256: 72705A4A20E38718B25EE52FA2404A1AD98083B21EA839D592B581BF04C1AC95
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 1A
- SHA-256: D0E39AA7D2FA53581008A15D825C57D25BD49247834431F8A227A29C280A1C0C
- SPKI SHA-256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/apca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                A3:85:31:8E:63:18:86:2D:AF:D8:17:CD:A1:37:C4:9C:EB:01:1D:F7
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D0E39AA7D2FA53581008A15D825C57D25BD49247834431F8A227A29C280A1C0C
    SPKI SHA256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 05
- SHA-256: 8804686E46009A7BC07F0DB19D99DA54D04184FB9860385A6AFDC8B21B14A6C1
- SPKI SHA-256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
- Validity: 2009-03-09 to 2038-01-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/apca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  9 20:45:17 2009 GMT
            Not After : Jan 17 20:45:17 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.0
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                A3:85:31:8E:63:18:86:2D:AF:D8:17:CD:A1:37:C4:9C:EB:01:1D:F7
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 8804686E46009A7BC07F0DB19D99DA54D04184FB9860385A6AFDC8B21B14A6C1
    SPKI SHA256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0F
- SHA-256: EC8D8871A6FD4EF187B5BA8BB1F8F8D65EAA30A3E9B34926AA088C5D8D95E127
- SPKI SHA-256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
- Validity: 2009-06-16 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/apca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 14:42:17 2009 GMT
            Not After : Dec 29 14:42:17 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.21.2.1
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                A3:85:31:8E:63:18:86:2D:AF:D8:17:CD:A1:37:C4:9C:EB:01:1D:F7
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: EC8D8871A6FD4EF187B5BA8BB1F8F8D65EAA30A3E9B34926AA088C5D8D95E127
    SPKI SHA256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.21.2.1
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Advanced Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Advanced Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 15
- SHA-256: 087AD75B7D97E9B868BA46B115D51C1135B3E3E70384279C0D468DFF503B1F27
- SPKI SHA-256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/apca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Advanced Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                A3:85:31:8E:63:18:86:2D:AF:D8:17:CD:A1:37:C4:9C:EB:01:1D:F7
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 087AD75B7D97E9B868BA46B115D51C1135B3E3E70384279C0D468DFF503B1F27
    SPKI SHA256: DF65E9C74501BE0F31914C06F143745E813549D08E20B9285CAD3B05E162EEC7
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Authentication e-Szigno CA4

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Authentication e-Szigno CA4
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: B0226A6825EC764A404121E3461BC6FA
- SHA-256: 3F1248F72F39D377B589AF57808031703BCB74F30D0F66BD7F59D4668BA07755
- SPKI SHA-256: B7D70B3804564959F2D15BF4FC015621A7B9A790C0A57B3A9F21C64F10B6A65B
- Validity: 2006-10-05 to 2016-10-05
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/CA4.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b0:22:6a:68:25:ec:76:4a:40:41:21:e3:46:1b:c6:fa
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Oct  5 14:20:16 2006 GMT
            Not After : Oct  5 14:20:12 2016 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Authentication e-Szigno CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Azonos\xC3\xADt\xC3\xB3 e-Szign\xC3\xB3 CA4/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.2
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                1D:AB:2A:1A:17:AC:2F:E2:81:35:39:86:F4:28:29:97:36:D4:7F:C9
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: 3F1248F72F39D377B589AF57808031703BCB74F30D0F66BD7F59D4668BA07755
    SPKI SHA256: B7D70B3804564959F2D15BF4FC015621A7B9A790C0A57B3A9F21C64F10B6A65B
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Class2 e-Szigno SSL CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Class2 e-Szigno SSL CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 8E5F46EF1EC4E10FCA08160A
- SHA-256: 3912C585E727F2B077888F678F043FD8DDCEE9E91E6628A6245B1B8EBBCC3912
- SPKI SHA-256: 3593F8682E1B4268E5C57440732800E8B17CCB37999722A44D31880BB07D8253
- Validity: 2016-08-29 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ssl2ca2016-crl1.e-szigno.hu/ssl2ca2016.crl, http://ssl2ca2016-crl2.e-szigno.hu/ssl2ca2016.crl, http://ssl2ca2016-crl3.e-szigno.hu/ssl2ca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8e:5f:46:ef:1e:c4:e1:0f:ca:08:16:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 29 02:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Class2 e-Szigno SSL CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                66:C1:7E:D9:43:D0:22:42:B4:BE:96:78:96:9C:4E:44:76:14:5B:4C
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 3912C585E727F2B077888F678F043FD8DDCEE9E91E6628A6245B1B8EBBCC3912
    SPKI SHA256: 3593F8682E1B4268E5C57440732800E8B17CCB37999722A44D31880BB07D8253
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Class3 KET e-Szigno CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Class3 KET e-Szigno CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: BDAC3D35984F42E5560E220A
- SHA-256: 7BCF1C8A12EE0B2854A1B41070652B0325E7D0C20B9C44D4ACE9C643387F1431
- SPKI SHA-256: F5C50C660B933654BB4ACA8445B7A79B04369C5A6AD571325C562ADB42C160A4
- Validity: 2018-09-06 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/ka3ca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bd:ac:3d:35:98:4f:42:e5:56:0e:22:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Sep  6 09:00:00 2018 GMT
            Not After : Dec 29 09:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = Class3 KET e-Szigno CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                96:4A:F8:C6:60:8E:16:C0:9D:73:AC:20:85:80:19:9D:D7:C0:18:6D
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 7BCF1C8A12EE0B2854A1B41070652B0325E7D0C20B9C44D4ACE9C643387F1431
    SPKI SHA256: F5C50C660B933654BB4ACA8445B7A79B04369C5A6AD571325C562ADB42C160A4
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A15A22E9DC035BEFE8FD990A
- SHA-256: 42DC827F46FB5E85DFFAE47D3C690F501ECE25D575D597A50D8F878FA42AFCEA
- SPKI SHA-256: DD319D2368D1F8FBED5973BD37CE1675F091BEBE67343EF9BB5A06055BCF125E
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec2ca2017-crl1.e-szigno.hu/ec2ca2017.crl, http://ec2ca2017-crl2.e-szigno.hu/ec2ca2017.crl, http://ec2ca2017-crl3.e-szigno.hu/ec2ca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:5a:22:e9:dc:03:5b:ef:e8:fd:99:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                33:FC:04:69:FC:65:B3:69:43:52:F1:17:FE:AF:D1:C4:44:80:71:88
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 42DC827F46FB5E85DFFAE47D3C690F501ECE25D575D597A50D8F878FA42AFCEA
    SPKI SHA256: DD319D2368D1F8FBED5973BD37CE1675F091BEBE67343EF9BB5A06055BCF125E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 CodeSigning CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: C9F38B06CDFF2AFDB71F580A
- SHA-256: EEA77E4D1862BF41FCC0F9B562AD45A9F446D7C27380E09DD756F53903828CBE
- SPKI SHA-256: A76AD5C4FBB0E30E500A216293700C82657BB69A13061C9F828AC0B89565A11A
- Validity: 2019-09-10 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/ec2csca2020.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c9:f3:8b:06:cd:ff:2a:fd:b7:1f:58:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 10 06:00:00 2019 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 CodeSigning CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing, OCSP Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                7B:DC:AB:3D:57:68:32:1C:35:28:B8:8B:5D:18:13:E3:72:76:47:AE
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: EEA77E4D1862BF41FCC0F9B562AD45A9F446D7C27380E09DD756F53903828CBE
    SPKI SHA256: A76AD5C4FBB0E30E500A216293700C82657BB69A13061C9F828AC0B89565A11A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 CodeSigning CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: AA7DB8EE277DAAC2E3E5CB0A
- SHA-256: E948896622F92706B191E7E06642831A63B5F392B78F92F02E0D696E747400D9
- SPKI SHA-256: A76AD5C4FBB0E30E500A216293700C82657BB69A13061C9F828AC0B89565A11A
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/ec2csca2020.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:7d:b8:ee:27:7d:aa:c2:e3:e5:cb:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 CodeSigning CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                7B:DC:AB:3D:57:68:32:1C:35:28:B8:8B:5D:18:13:E3:72:76:47:AE
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: E948896622F92706B191E7E06642831A63B5F392B78F92F02E0D696E747400D9
    SPKI SHA256: A76AD5C4FBB0E30E500A216293700C82657BB69A13061C9F828AC0B89565A11A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 CodeSigning CA 2020

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 CodeSigning CA 2020
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: D370F0C588F7E4FE859A850A
- SHA-256: BA52633D91DFD48EE5B135B2543E8DD3557F2DB33C0534E41A2268097C3008CA
- SPKI SHA-256: 6015F4EF7C1B24B385CB0410F2B472F73695F54423953BF2E28167A1407BFBBF
- Validity: 2020-08-25 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec2csca2020-crl1.e-szigno.hu/ec2csca2020.crl, http://ec2csca2020-crl2.e-szigno.hu/ec2csca2020.crl, http://ec2csca2020-crl3.e-szigno.hu/ec2csca2020.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d3:70:f0:c5:88:f7:e4:fe:85:9a:85:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Aug 25 13:00:00 2020 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 CodeSigning CA 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                5C:B4:37:95:41:03:62:9E:B4:05:16:B0:98:D2:AE:C4:86:04:54:1E
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: BA52633D91DFD48EE5B135B2543E8DD3557F2DB33C0534E41A2268097C3008CA
    SPKI SHA256: 6015F4EF7C1B24B385CB0410F2B472F73695F54423953BF2E28167A1407BFBBF
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A6E94D04B3BCA2DC1AD69D0A
- SHA-256: 2A0E3F2A77A80DCBE5CD52D50D65076EBD37FAD531DB10D6A1385A557F7B725D
- SPKI SHA-256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec2sslca2017-crl1.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl2.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl3.e-szigno.hu/ec2sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a6:e9:4d:04:b3:bc:a2:dc:1a:d6:9d:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                DF:39:68:2D:8E:A4:D3:34:E5:C5:2F:1A:01:78:C4:C3:16:DB:25:2B
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 2A0E3F2A77A80DCBE5CD52D50D65076EBD37FAD531DB10D6A1385A557F7B725D
    SPKI SHA256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 011E906320EEE1EBA2055B860A
- SHA-256: AB5719FE2CAC8FA5F97A1AE086D863C3D9A1023359299882C4AFA81E207BB1CA
- SPKI SHA-256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec2sslca2017-crl1.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl2.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl3.e-szigno.hu/ec2sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1e:90:63:20:ee:e1:eb:a2:05:5b:86:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                DF:39:68:2D:8E:A4:D3:34:E5:C5:2F:1A:01:78:C4:C3:16:DB:25:2B
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: AB5719FE2CAC8FA5F97A1AE086D863C3D9A1023359299882C4AFA81E207BB1CA
    SPKI SHA256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class2 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class2 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F548385E2CDCA9D3B5830F0A
- SHA-256: FD8E0C8CCCDBBAE4C1F07C248D11FEBBB0FB3DA0CD0D894A8A80D804A8D39A7D
- SPKI SHA-256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
- Validity: 2023-08-24 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec2sslca2017-crl1.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl2.e-szigno.hu/ec2sslca2017.crl, http://ec2sslca2017-crl3.e-szigno.hu/ec2sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:48:38:5e:2c:dc:a9:d3:b5:83:0f:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 24 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class2 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                DF:39:68:2D:8E:A4:D3:34:E5:C5:2F:1A:01:78:C4:C3:16:DB:25:2B
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: FD8E0C8CCCDBBAE4C1F07C248D11FEBBB0FB3DA0CD0D894A8A80D804A8D39A7D
    SPKI SHA256: 1C65C1ED321F7282EA2C8345DCB243D80F6DDD5E157478DC06FE8B6E856240CA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Class3 CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A2A692BF8E596B5602EA8B0A
- SHA-256: 4F83842F1F04AB1E04D4D8E751666FCA82E5191CAFC24062BFD1FE77C02CA4B4
- SPKI SHA-256: 5F830EAA15D0338A1B7ED5B9760003C6220821A670A0D1EFB9885126AEDE55ED
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec3ca2017-crl1.e-szigno.hu/ec3ca2017.crl, http://ec3ca2017-crl2.e-szigno.hu/ec3ca2017.crl, http://ec3ca2017-crl3.e-szigno.hu/ec3ca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a2:a6:92:bf:8e:59:6b:56:02:ea:8b:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                A4:6B:3C:E4:BE:77:3C:C5:63:EA:B6:A3:09:DF:2B:AD:D0:45:06:88
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 4F83842F1F04AB1E04D4D8E751666FCA82E5191CAFC24062BFD1FE77C02CA4B4
    SPKI SHA256: 5F830EAA15D0338A1B7ED5B9760003C6220821A670A0D1EFB9885126AEDE55ED
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class3 CodeSigning CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: CA869F127CD39CAD28A8E70A
- SHA-256: DDAB688031C1F96164812D49B513E538DAF1AAC84C10AB976BBE8C400B3F25A1
- SPKI SHA-256: 862C37D5D0349C2FDC13E00A5EB2E5892C4EB1D1800A88BBEA7EF7DFC7A8EC99
- Validity: 2019-09-10 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/ec3csca2020.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:86:9f:12:7c:d3:9c:ad:28:a8:e7:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 10 06:00:00 2019 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 CodeSigning CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing, OCSP Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                FD:71:4E:1D:DE:27:72:24:E3:74:AD:91:1A:3D:30:DF:69:32:9F:FF
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: DDAB688031C1F96164812D49B513E538DAF1AAC84C10AB976BBE8C400B3F25A1
    SPKI SHA256: 862C37D5D0349C2FDC13E00A5EB2E5892C4EB1D1800A88BBEA7EF7DFC7A8EC99
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class3 CodeSigning CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: AB5B681564A5209318F6AB0A
- SHA-256: DB6555FA1D9834527469095F93469F7AF3FB29CEC555DED148A5B0207CEC7F43
- SPKI SHA-256: 862C37D5D0349C2FDC13E00A5EB2E5892C4EB1D1800A88BBEA7EF7DFC7A8EC99
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/ec3csca2020.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ab:5b:68:15:64:a5:20:93:18:f6:ab:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 CodeSigning CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                FD:71:4E:1D:DE:27:72:24:E3:74:AD:91:1A:3D:30:DF:69:32:9F:FF
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: DB6555FA1D9834527469095F93469F7AF3FB29CEC555DED148A5B0207CEC7F43
    SPKI SHA256: 862C37D5D0349C2FDC13E00A5EB2E5892C4EB1D1800A88BBEA7EF7DFC7A8EC99
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class3 CodeSigning CA 2020

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 CodeSigning CA 2020
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: D44A4BC0FBA0A1BF0258AB0A
- SHA-256: 711CBB0479DDC596745815E797423305F95EDD792C5BC5854CED5A7FAFB4AA8D
- SPKI SHA-256: 58EDA58EFA54FF4E58E8B0207CB6E1AB1289BC2815E7E17FE5459235392BCBFA
- Validity: 2020-08-25 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec3csca2020-crl1.e-szigno.hu/ec3csca2020.crl, http://ec3csca2020-crl2.e-szigno.hu/ec3csca2020.crl, http://ec3csca2020-crl3.e-szigno.hu/ec3csca2020.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d4:4a:4b:c0:fb:a0:a1:bf:02:58:ab:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Aug 25 13:00:00 2020 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 CodeSigning CA 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                76:AB:B0:21:BF:70:BE:54:6D:91:2B:8E:F1:F4:EA:CB:A7:07:EA:66
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 711CBB0479DDC596745815E797423305F95EDD792C5BC5854CED5A7FAFB4AA8D
    SPKI SHA256: 58EDA58EFA54FF4E58E8B0207CB6E1AB1289BC2815E7E17FE5459235392BCBFA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class3 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F45B65603690FDCC8775650A
- SHA-256: 1744D73134F95CE916ADEBEE6F75742C47936868B64D2A0C162EF132900F0EE4
- SPKI SHA-256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
- Validity: 2023-08-24 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec3sslca2017-crl1.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl2.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl3.e-szigno.hu/ec3sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:5b:65:60:36:90:fd:cc:87:75:65:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 24 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                8A:A5:35:B8:92:D5:A6:BC:F9:CE:81:EA:A7:96:1C:7B:DE:20:E7:E0
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 1744D73134F95CE916ADEBEE6F75742C47936868B64D2A0C162EF132900F0EE4
    SPKI SHA256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Class3 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 011FB768CB8751DCF3AA74A80A
- SHA-256: 8D2EC30151183E520CCF6AACCDB74565324F9CE6043C87C268BD26FEC197908F
- SPKI SHA-256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec3sslca2017-crl1.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl2.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl3.e-szigno.hu/ec3sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:b7:68:cb:87:51:dc:f3:aa:74:a8:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                8A:A5:35:B8:92:D5:A6:BC:F9:CE:81:EA:A7:96:1C:7B:DE:20:E7:E0
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 8D2EC30151183E520CCF6AACCDB74565324F9CE6043C87C268BD26FEC197908F
    SPKI SHA256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Class3 SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Class3 SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A3F1C99D52569D8D992E4C0A
- SHA-256: BCBC18C463B61F3A033B10C74974ED8A2C328AFCD67A338D9871506A3515419F
- SPKI SHA-256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ec3sslca2017-crl1.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl2.e-szigno.hu/ec3sslca2017.crl, http://ec3sslca2017-crl3.e-szigno.hu/ec3sslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:f1:c9:9d:52:56:9d:8d:99:2e:4c:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Class3 SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                8A:A5:35:B8:92:D5:A6:BC:F9:CE:81:EA:A7:96:1C:7B:DE:20:E7:E0
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: BCBC18C463B61F3A033B10C74974ED8A2C328AFCD67A338D9871506A3515419F
    SPKI SHA256: EBD0EEA379E69509D412FAB3954DBBA930DA0D8F4AD72374C1F768A48B3D63BB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno CodeSigning CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning Root CA 2024
- Serial: 010D93D1E9BF2F7520D8B5E80A
- SHA-256: EAB8DA8EC9C4B3454CEE24E59243750B62E433D12A8807674C25E270F0B74268
- SPKI SHA-256: 5F738B19529D2BDEC4E2D34C122479F3A257187DFD27F2F9BA2768A052CB2878
- Validity: 2024-07-31 to 2039-07-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://csca2024-crl.e-szigno.hu/csca2024.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://csrootca2024-ocsp.e-szigno.hu
- CRL DP: http://csrootca2024-crl.e-szigno.hu/csrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:93:d1:e9:bf:2f:75:20:d8:b5:e8:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno CodeSigning Root CA 2024
        Validity
            Not Before: Jul 31 17:00:00 2024 GMT
            Not After : Jul 13 17:00:00 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno CodeSigning CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Code Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                11:0C:35:BF:3A:94:C4:A6:22:DC:11:98:C4:1B:4D:C6:13:EA:39:BB
            X509v3 Authority Key Identifier:
                85:42:05:43:75:91:B5:5C:4D:23:31:2C:E9:AA:F4:B2:BC:5F:9A:A1
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://csrootca2024-crl.e-szigno.hu/csrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://csrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://csrootca2024-ca.e-szigno.hu/csrootca2024.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: EAB8DA8EC9C4B3454CEE24E59243750B62E433D12A8807674C25E270F0B74268
    SPKI SHA256: 5F738B19529D2BDEC4E2D34C122479F3A257187DFD27F2F9BA2768A052CB2878
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Code Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://csrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://csrootca2024-ca.e-szigno.hu/csrootca2024.crt
- CRL Distribution Points: http://csrootca2024-crl.e-szigno.hu/csrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno CodeSigning TSA CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno CodeSigning TSA CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TSA Root CA 2024
- Serial: 010F9F64E7A91D2C81301D750A
- SHA-256: 5C8F9D101C35CF42CF01C74E1E6AA665188FE1C5E7BDED02D6A67E1938D207A6
- SPKI SHA-256: 2A7FCD9C9BA981D3DD7860969273535AE5B0376D200465127619228E4F022FF3
- Validity: 2024-07-31 to 2039-07-13
- Key: RSA 4096
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://cstsaca2024-crl.e-szigno.hu/cstsaca2024.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tsarootca2024-ocsp.e-szigno.hu
- CRL DP: http://tsarootca2024-crl.e-szigno.hu/tsarootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0f:9f:64:e7:a9:1d:2c:81:30:1d:75:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TSA Root CA 2024
        Validity
            Not Before: Jul 31 17:00:00 2024 GMT
            Not After : Jul 13 17:00:00 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno CodeSigning TSA CA 2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                C9:1D:D0:65:91:B6:CB:31:B5:03:A2:BC:B3:F9:2D:1C:B5:DF:FC:18
            X509v3 Authority Key Identifier:
                8B:FC:3B:CE:03:E9:1E:42:D8:6D:C8:9B:82:CC:BE:93:6E:11:94:23
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tsarootca2024-crl.e-szigno.hu/tsarootca2024.crl
            Authority Information Access:
                OCSP - URI:http://tsarootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://tsarootca2024-ca.e-szigno.hu/tsarootca2024.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 5C8F9D101C35CF42CF01C74E1E6AA665188FE1C5E7BDED02D6A67E1938D207A6
    SPKI SHA256: 2A7FCD9C9BA981D3DD7860969273535AE5B0376D200465127619228E4F022FF3
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tsarootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://tsarootca2024-ca.e-szigno.hu/tsarootca2024.crt
- CRL Distribution Points: http://tsarootca2024-crl.e-szigno.hu/tsarootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno DV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: F028E28DA15955F7AB43940A
- SHA-256: 076B30115E430F7C58EBBC1B79ECCE567704D9AA3DA15F5060855A880E237155
- SPKI SHA-256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
- Validity: 2023-07-19 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2023-crl.e-szigno.hu/edvtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:28:e2:8d:a1:59:55:f7:ab:43:94:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Jul 19 15:31:20 2023 GMT
            Not After : Jul 18 15:31:20 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier:
                A5:B1:7D:1C:16:E5:78:3F:13:F6:CA:66:38:4F:B3:F4:7C:A9:D6:39
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 076B30115E430F7C58EBBC1B79ECCE567704D9AA3DA15F5060855A880E237155
    SPKI SHA256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno DV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 010C9FBF2D694E7A023FAA370A
- SHA-256: 57A019C680987C8CB86B01F84F7DEF2C98B39B29A7C4F14AF1765ECF457A0706
- SPKI SHA-256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
- Validity: 2024-07-31 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2023-crl.e-szigno.hu/edvtlsca2023.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0c:9f:bf:2d:69:4e:7a:02:3f:aa:37:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jul 31 10:00:00 2024 GMT
            Not After : Jul 18 10:00:00 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A5:B1:7D:1C:16:E5:78:3F:13:F6:CA:66:38:4F:B3:F4:7C:A9:D6:39
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 57A019C680987C8CB86B01F84F7DEF2C98B39B29A7C4F14AF1765ECF457A0706
    SPKI SHA256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno DV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F185642FCC9F4A98034F960A
- SHA-256: C04C30E40DD7E96982F8606EBEF35548E5C6F4F792A52A5178CF24A0E9FD7396
- SPKI SHA-256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
- Validity: 2023-07-19 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2023-crl.e-szigno.hu/edvtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:85:64:2f:cc:9f:4a:98:03:4f:96:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 19 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A5:B1:7D:1C:16:E5:78:3F:13:F6:CA:66:38:4F:B3:F4:7C:A9:D6:39
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: C04C30E40DD7E96982F8606EBEF35548E5C6F4F792A52A5178CF24A0E9FD7396
    SPKI SHA256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno DV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 012718519333DA2E0468AEF80A
- SHA-256: 9B9EE27704A2DF34063ABDD64C2B882861DD87885A3128405EB5EDE0B733D053
- SPKI SHA-256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
- Validity: 2025-05-30 to 2028-05-29
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2023-crl.e-szigno.hu/edvtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:27:18:51:93:33:da:2e:04:68:ae:f8:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: May 30 09:00:00 2025 GMT
            Not After : May 29 08:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                A5:B1:7D:1C:16:E5:78:3F:13:F6:CA:66:38:4F:B3:F4:7C:A9:D6:39
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 9B9EE27704A2DF34063ABDD64C2B882861DD87885A3128405EB5EDE0B733D053
    SPKI SHA256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno DV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0120F9D1DDED74E1B9FD84240A
- SHA-256: 2E3A5E1D3D84EA50D278DA47907914049082B5ECAA10175E10CA7FA8FC381B74
- SPKI SHA-256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2023-crl.e-szigno.hu/edvtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:20:f9:d1:dd:ed:74:e1:b9:fd:84:24:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A5:B1:7D:1C:16:E5:78:3F:13:F6:CA:66:38:4F:B3:F4:7C:A9:D6:39
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 2E3A5E1D3D84EA50D278DA47907914049082B5ECAA10175E10CA7FA8FC381B74
    SPKI SHA256: 5F1C1715E021A15F78701DB0A70D5C7C2B0F4BC04FBC97AF0B20A86E6E102B18
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno DV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 0115BE93AA94037B90C395E80A
- SHA-256: C6F243A392D070CB49DC86BAC322AF384D3B82C381DED867EC17CC564CD95C8D
- SPKI SHA-256: 4BC38DA6FFD830E892D2D104019866C61C0B7DF2A2F660AF828BEAE6C1991D9D
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2025-crl.e-szigno.hu/edvtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:15:be:93:aa:94:03:7b:90:c3:95:e8:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jan  6 13:00:00 2025 GMT
            Not After : Jan  5 12:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                41:CF:EE:36:2A:A4:05:0B:AD:9E:57:1D:AD:3D:1E:F2:F9:D3:EC:5C
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: C6F243A392D070CB49DC86BAC322AF384D3B82C381DED867EC17CC564CD95C8D
    SPKI SHA256: 4BC38DA6FFD830E892D2D104019866C61C0B7DF2A2F660AF828BEAE6C1991D9D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno DV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 01194DA30E29BC4E5895B91C0A
- SHA-256: 9BD81C0752E0C4DBC839D22268C59FD25C819992C039A9BC3736B2E178E145BA
- SPKI SHA-256: 4BC38DA6FFD830E892D2D104019866C61C0B7DF2A2F660AF828BEAE6C1991D9D
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2025-crl.e-szigno.hu/edvtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:19:4d:a3:0e:29:bc:4e:58:95:b9:1c:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jan  6 16:00:00 2025 GMT
            Not After : Jan  5 15:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                41:CF:EE:36:2A:A4:05:0B:AD:9E:57:1D:AD:3D:1E:F2:F9:D3:EC:5C
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 9BD81C0752E0C4DBC839D22268C59FD25C819992C039A9BC3736B2E178E145BA
    SPKI SHA256: 4BC38DA6FFD830E892D2D104019866C61C0B7DF2A2F660AF828BEAE6C1991D9D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno DV TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno DV TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 014290901B340894B60310000A
- SHA-256: 243F58613E1D1F45DE482FD77BF57BBA1C92FF7596CBC3E020450499541F2BDB
- SPKI SHA-256: 83B3E8E6097679D82E4A7D543592EF42DFD46BEBC1147F2A796C7C35FB0FCFE0
- Validity: 2026-03-18 to 2029-03-17
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://edvtlsca2026-crl.e-szigno.hu/edvtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:42:90:90:1b:34:08:94:b6:03:10:00:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno DV TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                33:5D:77:33:C4:7D:E5:65:53:E8:E4:3C:01:5E:71:DC:4C:1F:08:0E
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 243F58613E1D1F45DE482FD77BF57BBA1C92FF7596CBC3E020450499541F2BDB
    SPKI SHA256: 83B3E8E6097679D82E4A7D543592EF42DFD46BEBC1147F2A796C7C35FB0FCFE0
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno ECC Client CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno ECC Client CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC Client Root CA 2026
- Serial: 0147020A72BB1FE8CE1443C40A
- SHA-256: 800395BA307D7568FD809B43700066C0DEE6CAA55E3A7584E807A4EE0669AC44
- SPKI SHA-256: A7B91A206244EBA1EF52060E8F15589A228CD9322EB6FDD4D8FDE0921122DD5A
- Validity: 2026-06-04 to 2041-06-02
- Key: EC 384 secp384r1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eclientca2026-crl.e-szigno.hu/eclientca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://eclientrootca2026-ocsp.e-szigno.hu
- CRL DP: http://eclientrootca2026-crl.e-szigno.hu/eclientrootca2026.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:47:02:0a:72:bb:1f:e8:ce:14:43:c4:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC Client Root CA 2026
        Validity
            Not Before: Jun  4 14:00:00 2026 GMT
            Not After : Jun  2 13:59:59 2041 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno ECC Client CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                D0:66:D0:EA:23:5A:A9:FB:70:FA:91:B6:C9:2B:CF:04:7A:FB:98:F3
            X509v3 Authority Key Identifier:
                3C:DF:2C:36:79:4C:0E:44:78:A0:45:27:E8:93:DE:66:A0:AF:7F:10
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://eclientrootca2026-crl.e-szigno.hu/eclientrootca2026.crl
            Authority Information Access:
                OCSP - URI:http://eclientrootca2026-ocsp.e-szigno.hu
                CA Issuers - URI:http://eclientrootca2026-ca.e-szigno.hu/eclientrootca2026.crt
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 800395BA307D7568FD809B43700066C0DEE6CAA55E3A7584E807A4EE0669AC44
    SPKI SHA256: A7B91A206244EBA1EF52060E8F15589A228CD9322EB6FDD4D8FDE0921122DD5A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://eclientrootca2026-ocsp.e-szigno.hu
- AIA CA Issuers: http://eclientrootca2026-ca.e-szigno.hu/eclientrootca2026.crt
- CRL Distribution Points: http://eclientrootca2026-crl.e-szigno.hu/eclientrootca2026.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno ECC CodeSigning TSA CA 2024

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC CodeSigning TSA CA 2024
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno ECC TSA Root CA 2024
- Serial: 010EBC420ABBACE9D31152AF0A
- SHA-256: 25781E35E0B7D05C93F4AA5F20C2C6E84060D600BF66606362C5E064F169ED08
- SPKI SHA-256: BBA4F4ABB963C64501ADA0BB43F474C6A47F1AA748A06FFD97C78D2E29281ED0
- Validity: 2024-07-31 to 2039-07-13
- Key: EC 384 secp384r1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ecstsaca2024-crl.e-szigno.hu/ecstsaca2024.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etsarootca2024-ocsp.e-szigno.hu
- CRL DP: http://etsarootca2024-crl.e-szigno.hu/etsarootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0e:bc:42:0a:bb:ac:e9:d3:11:52:af:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC TSA Root CA 2024
        Validity
            Not Before: Jul 31 17:00:00 2024 GMT
            Not After : Jul 13 17:00:00 2039 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno ECC CodeSigning TSA CA 2024
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (384 bit)
                ASN1 OID: secp384r1
                NIST CURVE: P-384
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                4F:DD:CE:6A:07:73:8F:51:0E:4B:1C:C4:8C:63:23:2E:46:89:B3:94
            X509v3 Authority Key Identifier:
                BB:F9:32:F1:4E:17:68:D4:9F:50:79:64:7B:72:EB:41:AF:06:AA:2E
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etsarootca2024-crl.e-szigno.hu/etsarootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etsarootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etsarootca2024-ca.e-szigno.hu/etsarootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 25781E35E0B7D05C93F4AA5F20C2C6E84060D600BF66606362C5E064F169ED08
    SPKI SHA256: BBA4F4ABB963C64501ADA0BB43F474C6A47F1AA748A06FFD97C78D2E29281ED0
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etsarootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etsarootca2024-ca.e-szigno.hu/etsarootca2024.crt
- CRL Distribution Points: http://etsarootca2024-crl.e-szigno.hu/etsarootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Online SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F6E11A951092280F1CF36F0A
- SHA-256: B274FEBE6EBC71866C339F018AD933E7CD6805B43BFDE6D218DC21147169D76B
- SPKI SHA-256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
- Validity: 2023-08-24 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eosslca2017-crl1.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl2.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl3.e-szigno.hu/eosslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f6:e1:1a:95:10:92:28:0f:1c:f3:6f:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 24 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Online SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                15:6F:98:E1:27:DB:C8:B9:90:97:1D:92:6D:9B:62:1F:62:3D:A4:39
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: B274FEBE6EBC71866C339F018AD933E7CD6805B43BFDE6D218DC21147169D76B
    SPKI SHA256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Online SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A799E9A1B9F1905B9B8CE60A
- SHA-256: 974B82076154CEFF56ED4DB562186F7394A02FF387AA205D6367A8B08FF7FAA0
- SPKI SHA-256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eosslca2017-crl1.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl2.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl3.e-szigno.hu/eosslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:99:e9:a1:b9:f1:90:5b:9b:8c:e6:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Online SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                15:6F:98:E1:27:DB:C8:B9:90:97:1D:92:6D:9B:62:1F:62:3D:A4:39
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 974B82076154CEFF56ED4DB562186F7394A02FF387AA205D6367A8B08FF7FAA0
    SPKI SHA256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Online SSL CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Online SSL CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0121FD5375C969DB8A80F2520A
- SHA-256: 5576394132B1074F4FB58AC5AD59CABA10FD69D783D1747C94C00551992C9134
- SPKI SHA-256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eosslca2017-crl1.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl2.e-szigno.hu/eosslca2017.crl, http://eosslca2017-crl3.e-szigno.hu/eosslca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:fd:53:75:c9:69:db:8a:80:f2:52:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Online SSL CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                15:6F:98:E1:27:DB:C8:B9:90:97:1D:92:6D:9B:62:1F:62:3D:A4:39
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 5576394132B1074F4FB58AC5AD59CABA10FD69D783D1747C94C00551992C9134
    SPKI SHA256: 1BF2701CFFF27527BBA6E7D6714C8D72406BC416E743A2A6AB0FCE14F3E2408D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno OV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 012643E56741939E34DC19E30A
- SHA-256: 663E65EB4EB152A8266A1BF475108B73ABC90BC8AD98B58BE16234B281279796
- SPKI SHA-256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
- Validity: 2025-05-30 to 2028-05-29
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2023-crl.e-szigno.hu/eovtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:43:e5:67:41:93:9e:34:dc:19:e3:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: May 30 09:00:00 2025 GMT
            Not After : May 29 08:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                A9:45:9E:D5:13:9A:B2:60:19:A1:99:84:44:96:00:97:15:DB:81:00
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 663E65EB4EB152A8266A1BF475108B73ABC90BC8AD98B58BE16234B281279796
    SPKI SHA256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno OV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: EE187E8B193E1E208D00020A
- SHA-256: 6F265CCE1F350817ED888C9A07CE8D117E6647090894971C405C0D72EC959D5C
- SPKI SHA-256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
- Validity: 2023-07-19 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2023-crl.e-szigno.hu/eovtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ee:18:7e:8b:19:3e:1e:20:8d:00:02:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Jul 19 15:28:38 2023 GMT
            Not After : Jul 18 15:28:38 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier:
                A9:45:9E:D5:13:9A:B2:60:19:A1:99:84:44:96:00:97:15:DB:81:00
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 6F265CCE1F350817ED888C9A07CE8D117E6647090894971C405C0D72EC959D5C
    SPKI SHA256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno OV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: EFC22D8B7B784CCD70A7440A
- SHA-256: 12D4537A7547FF63C36923622A281AFFE9481120DB781776AAF981A1F9B668D8
- SPKI SHA-256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
- Validity: 2023-07-19 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2023-crl.e-szigno.hu/eovtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ef:c2:2d:8b:7b:78:4c:cd:70:a7:44:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 19 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:45:9E:D5:13:9A:B2:60:19:A1:99:84:44:96:00:97:15:DB:81:00
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 12D4537A7547FF63C36923622A281AFFE9481120DB781776AAF981A1F9B668D8
    SPKI SHA256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno OV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 010B2349E70C0D4BA319BF050A
- SHA-256: 728E604C51CFBD6ED1A673529598DDA17523DC61DD90E2551B0D57DD3A19F7AA
- SPKI SHA-256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
- Validity: 2024-07-31 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2023-crl.e-szigno.hu/eovtlsca2023.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0b:23:49:e7:0c:0d:4b:a3:19:bf:05:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jul 31 10:00:00 2024 GMT
            Not After : Jul 18 10:00:00 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:45:9E:D5:13:9A:B2:60:19:A1:99:84:44:96:00:97:15:DB:81:00
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 728E604C51CFBD6ED1A673529598DDA17523DC61DD90E2551B0D57DD3A19F7AA
    SPKI SHA256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno OV TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 012260F843787AA3CFA266310A
- SHA-256: BC75DB1DF88E0A11C1D432BC31CCF3369CDFBBC48BEDAC9AC41F31F03DEDE8A0
- SPKI SHA-256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2023-crl.e-szigno.hu/eovtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:60:f8:43:78:7a:a3:cf:a2:66:31:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:45:9E:D5:13:9A:B2:60:19:A1:99:84:44:96:00:97:15:DB:81:00
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: BC75DB1DF88E0A11C1D432BC31CCF3369CDFBBC48BEDAC9AC41F31F03DEDE8A0
    SPKI SHA256: 081A4A2946275AE60D8F29FA0380BAF9F6C83A107991B5F5AE41E9049FBB8346
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno OV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 01178D1B6715C7AD1CAC47AC0A
- SHA-256: D733903EBB84E2175FA1B8971840DFABF630B2C0C434D6DC9045DD19B3B95482
- SPKI SHA-256: 5F7BEF167CDE176E1B7E30B9FA7D06BC79472524953EBE7E6A37287BE99480BC
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2025-crl.e-szigno.hu/eovtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:8d:1b:67:15:c7:ad:1c:ac:47:ac:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jan  6 16:00:00 2025 GMT
            Not After : Jan  5 15:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                0B:1B:23:CD:93:FC:35:AA:51:17:0F:BC:AC:CA:74:E2:F5:DD:35:29
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D733903EBB84E2175FA1B8971840DFABF630B2C0C434D6DC9045DD19B3B95482
    SPKI SHA256: 5F7BEF167CDE176E1B7E30B9FA7D06BC79472524953EBE7E6A37287BE99480BC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno OV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 01168D32374CBA1A8875607F0A
- SHA-256: 097A48703C2E9D3607AC07B19A5D9948F3436AEFBE342A1835F0C725F52B5260
- SPKI SHA-256: 5F7BEF167CDE176E1B7E30B9FA7D06BC79472524953EBE7E6A37287BE99480BC
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2025-crl.e-szigno.hu/eovtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:8d:32:37:4c:ba:1a:88:75:60:7f:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jan  6 13:00:00 2025 GMT
            Not After : Jan  5 12:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                0B:1B:23:CD:93:FC:35:AA:51:17:0F:BC:AC:CA:74:E2:F5:DD:35:29
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 097A48703C2E9D3607AC07B19A5D9948F3436AEFBE342A1835F0C725F52B5260
    SPKI SHA256: 5F7BEF167CDE176E1B7E30B9FA7D06BC79472524953EBE7E6A37287BE99480BC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno OV TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno OV TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 0143E0B6812493A2A8A169A80A
- SHA-256: AD2AADACA897DEA22B889DDB381143049AD9975C0819B49350D6219019358A68
- SPKI SHA-256: F07A28A8321BE9D7988AF688AE33276D2566E4F9CACECE0CBA6F5C0F5FB636DC
- Validity: 2026-03-18 to 2029-03-17
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eovtlsca2026-crl.e-szigno.hu/eovtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:43:e0:b6:81:24:93:a2:a8:a1:69:a8:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno OV TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                B8:13:79:7B:A6:0A:75:DD:59:AE:5B:1B:F6:7D:40:D5:AE:C2:A5:D7
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: AD2AADACA897DEA22B889DDB381143049AD9975C0819B49350D6219019358A68
    SPKI SHA256: F07A28A8321BE9D7988AF688AE33276D2566E4F9CACECE0CBA6F5C0F5FB636DC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Pseudonymous CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Pseudonymous CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A8A6207E075CE78D923AF70A
- SHA-256: 6A6F2FA13B2D9DBBB409802002D3370672760A2178D9B8D5694D660474231FA4
- SPKI SHA-256: BEA7AB02ABC5073FA93F4958DCB29CF7A8CE2DC5AEFFF8A66F0D124B7A81721F
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/epca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:a6:20:7e:07:5c:e7:8d:92:3a:f7:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Pseudonymous CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                8E:B7:F6:69:1A:10:C0:9A:88:42:31:04:36:50:4C:1F:12:6C:14:2A
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 6A6F2FA13B2D9DBBB409802002D3370672760A2178D9B8D5694D660474231FA4
    SPKI SHA256: BEA7AB02ABC5073FA93F4958DCB29CF7A8CE2DC5AEFFF8A66F0D124B7A81721F
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 9C68095849E08BEAB447EF0A
- SHA-256: 5ABE5818F6D02F05106C6C355540E1BE217C2354B535CF2507BF8515E1A6044A
- SPKI SHA-256: 4B7ABD46D7ABAE8D578370C07B393310F302744A7532F1BA9FE992C6B74CCA56
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqca2017-crl1.e-szigno.hu/eqca2017.crl, http://eqca2017-crl2.e-szigno.hu/eqca2017.crl, http://eqca2017-crl3.e-szigno.hu/eqca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9c:68:09:58:49:e0:8b:ea:b4:47:ef:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                C6:13:FB:3C:9D:B4:B6:AE:2F:C6:DE:7F:95:4F:F3:1E:A9:D3:C6:F9
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 5ABE5818F6D02F05106C6C355540E1BE217C2354B535CF2507BF8515E1A6044A
    SPKI SHA256: 4B7ABD46D7ABAE8D578370C07B393310F302744A7532F1BA9FE992C6B74CCA56
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified Organization CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified Organization CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 9D6D3EFF75E60FFF2CA1060A
- SHA-256: 12EA26F6EEEFEC76AB8592545403AB88515B00E275D9888713407A86FC5C7FD7
- SPKI SHA-256: EB47B670CA1BAF1A4603BD647B4A381F996ECE904F66F9259AA9DE3CF03C8F1B
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_bel/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqoca2017-crl1.e-szigno.hu/eqoca2017.crl, http://eqoca2017-crl2.e-szigno.hu/eqoca2017.crl, http://eqoca2017-crl3.e-szigno.hu/eqoca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9d:6d:3e:ff:75:e6:0f:ff:2c:a1:06:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified Organization CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                83:79:02:B8:71:15:78:7F:0A:DD:6F:9A:A5:38:D6:9E:7A:37:EE:A5
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 12EA26F6EEEFEC76AB8592545403AB88515B00E275D9888713407A86FC5C7FD7
    SPKI SHA256: EB47B670CA1BAF1A4603BD647B4A381F996ECE904F66F9259AA9DE3CF03C8F1B
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified Pseudonymous CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified Pseudonymous CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 9F1D566220B1E414FB913D0A
- SHA-256: 1648CE4AB1BB65C485CB2236C768FABB865147D426915B92AFBCA81E9B2EE3BC
- SPKI SHA-256: F4C9BCEAEE16C062A5AC272EB778A6C812236B7CEDDFB588EE3769680B9C64EB
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/eqpca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9f:1d:56:62:20:b1:e4:14:fb:91:3d:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified Pseudonymous CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                19:D8:8F:35:42:F4:59:2E:E4:43:54:8F:EF:23:FD:F5:39:A3:EA:F1
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 1648CE4AB1BB65C485CB2236C768FABB865147D426915B92AFBCA81E9B2EE3BC
    SPKI SHA256: F4C9BCEAEE16C062A5AC272EB778A6C812236B7CEDDFB588EE3769680B9C64EB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified QCP CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified QCP CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 9E2C5EB959FD774CDD866A0A
- SHA-256: 6081BEE5B0DF191AC4E265AC0F6F7899F078B8C89F06055AE166AF91DF70D6E0
- SPKI SHA-256: CE8854E2E6A9D1961A1B1CE76274997E29973222F47CFA4EC05DC20434A8EB4F
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqcpca2017-crl1.e-szigno.hu/eqcpca2017.crl, http://eqcpca2017-crl2.e-szigno.hu/eqcpca2017.crl, http://eqcpca2017-crl3.e-szigno.hu/eqcpca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:2c:5e:b9:59:fd:77:4c:dd:86:6a:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified QCP CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                07:F6:2C:C2:03:43:5F:76:67:17:B7:A4:81:87:9A:CC:45:30:7D:DE
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 6081BEE5B0DF191AC4E265AC0F6F7899F078B8C89F06055AE166AF91DF70D6E0
    SPKI SHA256: CE8854E2E6A9D1961A1B1CE76274997E29973222F47CFA4EC05DC20434A8EB4F
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SMIME Root CA 2024
- Serial: 0110935F9A22BA4FA966B56D0A
- SHA-256: BD042314382B35B39FEF05E417E0801001596536D35651F1013A5158AAD41560
- SPKI SHA-256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
- Validity: 2024-07-31 to 2042-07-13
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqsmimeca2023-crl.e-szigno.hu/eqsmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://esmimerootca2024-ocsp.e-szigno.hu
- CRL DP: http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:93:5f:9a:22:ba:4f:a9:66:b5:6d:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SMIME Root CA 2024
        Validity
            Not Before: Jul 31 17:00:00 2024 GMT
            Not After : Jul 13 17:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                C1:EE:92:1B:FA:0A:B1:90:1C:CD:72:E7:79:15:C1:D4:36:76:9B:80
            X509v3 Authority Key Identifier:
                06:66:F3:4B:7C:3F:6B:C2:BB:D9:43:E7:99:BA:C1:29:61:5B:8C:F1
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
            Authority Information Access:
                OCSP - URI:http://esmimerootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://esmimerootca2024-ca.e-szigno.hu/esmimerootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: BD042314382B35B39FEF05E417E0801001596536D35651F1013A5158AAD41560
    SPKI SHA256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://esmimerootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://esmimerootca2024-ca.e-szigno.hu/esmimerootca2024.crt
- CRL Distribution Points: http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 011B4E2F432ED610B322A3200A
- SHA-256: 6E6D7A29D18E69699D8A25B29F28957B79202EE01CB12A6A12AF6F67C1A0999B
- SPKI SHA-256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqsmimeca2023-crl.e-szigno.hu/eqsmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:4e:2f:43:2e:d6:10:b3:22:a3:20:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                C1:EE:92:1B:FA:0A:B1:90:1C:CD:72:E7:79:15:C1:D4:36:76:9B:80
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 6E6D7A29D18E69699D8A25B29F28957B79202EE01CB12A6A12AF6F67C1A0999B
    SPKI SHA256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: F7755C9F6C4AFA2FCB93ED0A
- SHA-256: A40938BABD88FF42144B611298E90B3426194099152C49EAA4A8A6EAF42D2DD2
- SPKI SHA-256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
- Validity: 2023-09-18 to 2042-08-21
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqsmimeca2023-crl.e-szigno.hu/eqsmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:75:5c:9f:6c:4a:fa:2f:cb:93:ed:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 18 07:30:00 2023 GMT
            Not After : Aug 21 07:30:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                C1:EE:92:1B:FA:0A:B1:90:1C:CD:72:E7:79:15:C1:D4:36:76:9B:80
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: A40938BABD88FF42144B611298E90B3426194099152C49EAA4A8A6EAF42D2DD2
    SPKI SHA256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F8DBB81C0C4D98CFBE117B0A
- SHA-256: 206ED85E0F129A6DE85FEB064BADC1B57F8DA94FA7D51BEF81F9C74317D2B184
- SPKI SHA-256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
- Validity: 2023-09-18 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqsmimeca2023-crl.e-szigno.hu/eqsmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:db:b8:1c:0c:4d:98:cf:be:11:7b:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Sep 18 07:30:00 2023 GMT
            Not After : Dec 30 08:30:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                C1:EE:92:1B:FA:0A:B1:90:1C:CD:72:E7:79:15:C1:D4:36:76:9B:80
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 206ED85E0F129A6DE85FEB064BADC1B57F8DA94FA7D51BEF81F9C74317D2B184
    SPKI SHA256: A15718EB42B74E463C81900C3CD104B1765B30E98A108C5D3EFA9662E5CDAD6E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Qualified TLS CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: B7F33EB778EB631CBE7C800A
- SHA-256: 7DF800075F5203C017364E81195A9AC9FF00C507D64A70F737D8D3E8CB3F0845
- SPKI SHA-256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
- Validity: 2018-07-31 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2018-crl1.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl2.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl3.e-szigno.hu/eqtlsca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:f3:3e:b7:78:eb:63:1c:be:7c:80:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Jul 31 09:00:00 2018 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                D9:8D:18:B8:AC:23:B6:3B:8C:17:C9:EB:6E:B9:17:00:69:0D:A0:8C
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 7DF800075F5203C017364E81195A9AC9FF00C507D64A70F737D8D3E8CB3F0845
    SPKI SHA256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F3E6D08D378D702AF247AE0A
- SHA-256: 6A48E734AC6F067140C928ADBBCC4492469D416DE2D3C9A7A197D62370EAC0E2
- SPKI SHA-256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
- Validity: 2023-08-24 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2018-crl1.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl2.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl3.e-szigno.hu/eqtlsca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f3:e6:d0:8d:37:8d:70:2a:f2:47:ae:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 24 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                D9:8D:18:B8:AC:23:B6:3B:8C:17:C9:EB:6E:B9:17:00:69:0D:A0:8C
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 6A48E734AC6F067140C928ADBBCC4492469D416DE2D3C9A7A197D62370EAC0E2
    SPKI SHA256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Qualified TLS CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 011CDAF2F5EC74A35D8BCD990A
- SHA-256: 23596672BF5A6C554737EF12C544FE88793F76C3C1F3CDE19B6A25D90C0E2042
- SPKI SHA-256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2018-crl1.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl2.e-szigno.hu/eqtlsca2018.crl, http://eqtlsca2018-crl3.e-szigno.hu/eqtlsca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1c:da:f2:f5:ec:74:a3:5d:8b:cd:99:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2018
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                D9:8D:18:B8:AC:23:B6:3B:8C:17:C9:EB:6E:B9:17:00:69:0D:A0:8C
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 23596672BF5A6C554737EF12C544FE88793F76C3C1F3CDE19B6A25D90C0E2042
    SPKI SHA256: A9DF442327E9EC212D6E4C5A7DEC9802E0BFF304015AA1997E590BCE7C27BB27
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 011D23B6C22FE873E0FB6FD90A
- SHA-256: D00EC5B7B56EF27F65335C0B680B80D7DD1408FF7FD9E985F3184B1C6D0E8BB3
- SPKI SHA-256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2023-crl.e-szigno.hu/eqtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1d:23:b6:c2:2f:e8:73:e0:fb:6f:d9:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                7F:98:B4:14:21:B2:9E:1A:42:AB:77:C3:48:59:06:51:49:4E:C3:49
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D00EC5B7B56EF27F65335C0B680B80D7DD1408FF7FD9E985F3184B1C6D0E8BB3
    SPKI SHA256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: ED3AD1569B7BFB6BC5E9600A
- SHA-256: A115EC0D73C2E8ABB1883134FA2DF0D985E741881604A4082907D705E2407C72
- SPKI SHA-256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
- Validity: 2023-07-19 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2023-crl.e-szigno.hu/eqtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:3a:d1:56:9b:7b:fb:6b:c5:e9:60:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 19 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                7F:98:B4:14:21:B2:9E:1A:42:AB:77:C3:48:59:06:51:49:4E:C3:49
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: A115EC0D73C2E8ABB1883134FA2DF0D985E741881604A4082907D705E2407C72
    SPKI SHA256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Qualified TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: EC1E078082032645C428920A
- SHA-256: 9E4115FD70E2317E15BF811552610643B32818A0304AA3C97685A76465493261
- SPKI SHA-256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
- Validity: 2023-07-19 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2023-crl.e-szigno.hu/eqtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:1e:07:80:82:03:26:45:c4:28:92:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Jul 19 15:24:13 2023 GMT
            Not After : Jul 18 15:24:13 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier:
                7F:98:B4:14:21:B2:9E:1A:42:AB:77:C3:48:59:06:51:49:4E:C3:49
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 9E4115FD70E2317E15BF811552610643B32818A0304AA3C97685A76465493261
    SPKI SHA256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Qualified TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 01257389798D00E5A49766E50A
- SHA-256: 2F419E32E54AF3A3F9BBC9CCF0B9D3AEB3D996D27CDB7891340DB1338DA3DB65
- SPKI SHA-256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
- Validity: 2025-05-30 to 2028-05-29
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2023-crl.e-szigno.hu/eqtlsca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:73:89:79:8d:00:e5:a4:97:66:e5:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: May 30 09:00:00 2025 GMT
            Not After : May 29 08:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                7F:98:B4:14:21:B2:9E:1A:42:AB:77:C3:48:59:06:51:49:4E:C3:49
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 2F419E32E54AF3A3F9BBC9CCF0B9D3AEB3D996D27CDB7891340DB1338DA3DB65
    SPKI SHA256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 010A1DA00AECD1E87D2FD6320A
- SHA-256: 88D307173ACDECF48B81F6469EAE798BAE6E5703CB6223EE82534AC769ACC422
- SPKI SHA-256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
- Validity: 2024-07-31 to 2026-07-18
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2023-crl.e-szigno.hu/eqtlsca2023.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0a:1d:a0:0a:ec:d1:e8:7d:2f:d6:32:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jul 31 10:00:00 2024 GMT
            Not After : Jul 18 10:00:00 2026 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                7F:98:B4:14:21:B2:9E:1A:42:AB:77:C3:48:59:06:51:49:4E:C3:49
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 88D307173ACDECF48B81F6469EAE798BAE6E5703CB6223EE82534AC769ACC422
    SPKI SHA256: 15FB2D20125140BFCE49D7458645D55F1617BE5C29795E0DE50CB341238C7ABE
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication, TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno Qualified TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno TLS Root CA 2024
- Serial: 01137330590F74842F0EE1EE0A
- SHA-256: 930F2575D4893C0761533AD83442A22C025905C5F3ED6118953EC5A6D846E05F
- SPKI SHA-256: 687887B12F860EF53A1C8A21392ED3BC624474823C914C0DD40F922A8242BE8E
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2025-crl.e-szigno.hu/eqtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- CRL DP: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:73:30:59:0f:74:84:2f:0e:e1:ee:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno TLS Root CA 2024
        Validity
            Not Before: Jan  6 13:00:00 2025 GMT
            Not After : Jan  5 12:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                92:A0:4B:94:44:46:BC:DC:23:7E:FC:38:DF:18:44:83:48:CC:1C:02
            X509v3 Authority Key Identifier:
                9B:B1:A3:E2:D9:8F:13:D7:26:6A:22:67:CA:83:CC:2F:50:57:77:65
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
            Authority Information Access:
                OCSP - URI:http://etlsrootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 930F2575D4893C0761533AD83442A22C025905C5F3ED6118953EC5A6D846E05F
    SPKI SHA256: 687887B12F860EF53A1C8A21392ED3BC624474823C914C0DD40F922A8242BE8E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://etlsrootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://etlsrootca2024-ca.e-szigno.hu/etlsrootca2024.crt
- CRL Distribution Points: http://etlsrootca2024-crl.e-szigno.hu/etlsrootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0118A7C5624D2838C6373D570A
- SHA-256: 4EF7E47B30C08FCB1692B9B7A6D8F3A9E341C00FB5D4F58716BFB37DEA6437CC
- SPKI SHA-256: 687887B12F860EF53A1C8A21392ED3BC624474823C914C0DD40F922A8242BE8E
- Validity: 2025-01-06 to 2028-01-05
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2025-crl.e-szigno.hu/eqtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:18:a7:c5:62:4d:28:38:c6:37:3d:57:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jan  6 16:00:00 2025 GMT
            Not After : Jan  5 15:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                92:A0:4B:94:44:46:BC:DC:23:7E:FC:38:DF:18:44:83:48:CC:1C:02
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 4EF7E47B30C08FCB1692B9B7A6D8F3A9E341C00FB5D4F58716BFB37DEA6437CC
    SPKI SHA256: 687887B12F860EF53A1C8A21392ED3BC624474823C914C0DD40F922A8242BE8E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno Qualified TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Qualified TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 014185EEB7D30EE5DC4C01020A
- SHA-256: CBBA5AFBB7E493C2D1EDFBB3B162394BFCEC0345A66DC1A167B203D534FBC15F
- SPKI SHA-256: 06B0D342FFA2A16359798167BDFA8363A096A50EED3ED7C1B4508FB1183CA186
- Validity: 2026-03-18 to 2029-03-17
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://eqtlsca2026-crl.e-szigno.hu/eqtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:85:ee:b7:d3:0e:e5:dc:4c:01:02:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Qualified TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                8C:93:CF:65:F3:BE:84:F1:16:67:AF:C8:EB:89:71:0D:40:22:F0:B7
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: CBBA5AFBB7E493C2D1EDFBB3B162394BFCEC0345A66DC1A167B203D534FBC15F
    SPKI SHA256: 06B0D342FFA2A16359798167BDFA8363A096A50EED3ED7C1B4508FB1183CA186
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA Client CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA Client CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA Client Root CA 2026
- Serial: 0146E891747BEBA8FD5095FF0A
- SHA-256: EEDA8D1D14988E10F82725963832B4F31FFC1E807D66932590BB4F2D8ABD88B5
- SPKI SHA-256: C951567F4D57441229564AA233D320C77FBA5F573797B2FBD45CB0F7156087BD
- Validity: 2026-06-04 to 2041-06-02
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://rclientca2026-crl.e-szigno.hu/rclientca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rclientrootca2026-ocsp.e-szigno.hu
- CRL DP: http://rclientrootca2026-crl.e-szigno.hu/rclientrootca2026.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:46:e8:91:74:7b:eb:a8:fd:50:95:ff:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA Client Root CA 2026
        Validity
            Not Before: Jun  4 14:00:00 2026 GMT
            Not After : Jun  2 13:59:59 2041 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA Client CA 2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Client Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                19:B6:E7:CB:F5:9E:1C:D9:8C:85:AD:90:AE:3B:72:6E:08:95:56:9A
            X509v3 Authority Key Identifier:
                5E:43:8E:C7:E8:CA:94:C9:F0:E5:41:3B:0C:05:91:8D:84:D7:12:AB
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rclientrootca2026-crl.e-szigno.hu/rclientrootca2026.crl
            Authority Information Access:
                OCSP - URI:http://rclientrootca2026-ocsp.e-szigno.hu
                CA Issuers - URI:http://rclientrootca2026-ca.e-szigno.hu/rclientrootca2026.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: EEDA8D1D14988E10F82725963832B4F31FFC1E807D66932590BB4F2D8ABD88B5
    SPKI SHA256: C951567F4D57441229564AA233D320C77FBA5F573797B2FBD45CB0F7156087BD
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Client Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rclientrootca2026-ocsp.e-szigno.hu
- AIA CA Issuers: http://rclientrootca2026-ca.e-szigno.hu/rclientrootca2026.crt
- CRL Distribution Points: http://rclientrootca2026-crl.e-szigno.hu/rclientrootca2026.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_client_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA DV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA DV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 0132DF9FA172CFE4E52658390A
- SHA-256: 1A0943C7348DCDF008C0B952A4F676C6EE4037DBA7FB7040BAC79550FA1DA439
- SPKI SHA-256: 5782158DA9876E068096C3E92E30EF698154DCED1CCA0FF20D8A791ACBB41415
- Validity: 2025-07-30 to 2028-07-29
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://dvtlsca2025-crl.e-szigno.hu/dvtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:32:df:9f:a1:72:cf:e4:e5:26:58:39:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Jul 30 15:30:00 2025 GMT
            Not After : Jul 29 15:29:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA DV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                1E:1C:10:CE:4A:85:72:13:6B:DF:54:C1:02:9C:10:B3:7C:9A:AA:D7
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2025-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 1A0943C7348DCDF008C0B952A4F676C6EE4037DBA7FB7040BAC79550FA1DA439
    SPKI SHA256: 5782158DA9876E068096C3E92E30EF698154DCED1CCA0FF20D8A791ACBB41415
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
- CRL Distribution Points: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA DV TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA DV TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 013F2F4FF275A122EA7669DA0A
- SHA-256: 13623DB5995C969B3B55A6E0AE7B6EB5B8AAC1452F649487F344EF920FFC8A5A
- SPKI SHA-256: F27F193E8F88D99E4BE92DC167D8B3A88B1121640CC4D9C7C8DD7E9E2EAB4072
- Validity: 2026-03-18 to 2029-03-17
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://dvtlsca2026-crl.e-szigno.hu/dvtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:2f:4f:f2:75:a1:22:ea:76:69:da:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA DV TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                0E:31:A2:74:3B:FD:C8:0B:51:3E:51:96:C9:AB:14:60:50:AA:10:27
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2025-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 13623DB5995C969B3B55A6E0AE7B6EB5B8AAC1452F649487F344EF920FFC8A5A
    SPKI SHA256: F27F193E8F88D99E4BE92DC167D8B3A88B1121640CC4D9C7C8DD7E9E2EAB4072
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
- CRL Distribution Points: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA OV TLS CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA OV TLS CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 0133C4DECD9A42DFAFCFEBFF0A
- SHA-256: C99F52ACF9022A44A37F5B3A6C270F8C545363B30B81A07264987CE7BB1BF865
- SPKI SHA-256: 0EFB034E779BB6BFAA30DCE6E592A476C8F69E3A0F7ADB734A84A867B2851555
- Validity: 2025-07-30 to 2028-07-29
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ovtlsca2025-crl.e-szigno.hu/ovtlsca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:33:c4:de:cd:9a:42:df:af:cf:eb:ff:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Jul 30 15:30:00 2025 GMT
            Not After : Jul 29 15:29:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA OV TLS CA 2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                75:01:70:03:9A:71:68:C2:E4:DF:5C:D8:F4:7A:65:8F:1C:23:B2:B9
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2025-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: C99F52ACF9022A44A37F5B3A6C270F8C545363B30B81A07264987CE7BB1BF865
    SPKI SHA256: 0EFB034E779BB6BFAA30DCE6E592A476C8F69E3A0F7ADB734A84A867B2851555
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
- CRL Distribution Points: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA OV TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA OV TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 0140F63F68D51B3B976C67200A
- SHA-256: 57E738508FA3B08211FEFF1E8D351509A98D5C955FDF973593C7F3C075125EC0
- SPKI SHA-256: 6C51E5A0B7254925142310635D0A91551F7513D59C00EFE219B89B390E756DDC
- Validity: 2026-03-18 to 2029-03-17
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://ovtlsca2026-crl.e-szigno.hu/ovtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:40:f6:3f:68:d5:1b:3b:97:6c:67:20:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA OV TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                62:55:49:29:4B:4D:29:00:C2:FE:DD:A1:42:CC:22:65:AB:AC:C7:79
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2025-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 57E738508FA3B08211FEFF1E8D351509A98D5C955FDF973593C7F3C075125EC0
    SPKI SHA256: 6C51E5A0B7254925142310635D0A91551F7513D59C00EFE219B89B390E756DDC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
- CRL Distribution Points: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA Qualified TLS CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno RSA Qualified TLS CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Serial: 013ED5549EF71D0972A4C2320A
- SHA-256: 399CC6D3D41B81F582139244B6B5D8F09E95E571030A6277F8F4051B2E17AF66
- SPKI SHA-256: 9BF226ABA542C565CC2691152D3FBDA208D6E6E27568C0AE1C4E33D48A118845
- Validity: 2026-03-18 to 2029-03-17
- Key: RSA 3072
- Signature Algorithm: RSA-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://qtlsca2026-crl.e-szigno.hu/qtlsca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3e:d5:54:9e:f7:1d:09:72:a4:c2:32:0a
        Signature Algorithm: sha512WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Mar 17 13:59:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno RSA Qualified TLS CA 2026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (3072 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                55:14:7D:B4:BF:80:61:C7:01:8C:51:BD:C4:74:01:23:19:F2:5B:25
            X509v3 Authority Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2025-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
    Signature Algorithm: sha512WithRSAEncryption
    SHA256 Fingerprint: 399CC6D3D41B81F582139244B6B5D8F09E95E571030A6277F8F4051B2E17AF66
    SPKI SHA256: 9BF226ABA542C565CC2691152D3FBDA208D6E6E27568C0AE1C4E33D48A118845
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2025-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2025-ca.e-szigno.hu/tlsrootca2025.crt
- CRL Distribution Points: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA TLS Root CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Serial: 0148EC4EF489F905C4AF10A40A
- SHA-256: 23D2D00DE33B4B927DABCEF720A36EADB659E79625DBCE5336BE62D0AFCB92AA
- SPKI SHA-256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
- Validity: 2026-07-22 to 2038-07-16
- Key: RSA 4096
- Signature Algorithm: ecdsa-with-SHA512

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- CRL DP: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:ec:4e:f4:89:f9:05:c4:af:10:a4:0a
        Signature Algorithm: ecdsa-with-SHA512
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Validity
            Not Before: Jul 22 08:00:00 2026 GMT
            Not After : Jul 16 07:59:59 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Subject Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 Authority Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
            Authority Information Access:
                OCSP - URI:http://tlsrootca2023-ocsp.e-szigno.hu
                CA Issuers - URI:http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
    Signature Algorithm: ecdsa-with-SHA512
    SHA256 Fingerprint: 23D2D00DE33B4B927DABCEF720A36EADB659E79625DBCE5336BE62D0AFCB92AA
    SPKI SHA256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://tlsrootca2023-ocsp.e-szigno.hu
- AIA CA Issuers: http://tlsrootca2023-ca.e-szigno.hu/tlsrootca2023.crt
- CRL Distribution Points: http://tlsrootca2023-crl.e-szigno.hu/tlsrootca2023.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- not_available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno RSA TLS Root CA 2025

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno RSA TLS Root CA 2025
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 01311AFB927A857F62D095820A
- SHA-256: 53B6A499FCC6C04A18A56B574584484072E4A306E07B4DD72D31B105453A1300
- SPKI SHA-256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
- Validity: 2025-07-30 to 2029-12-30
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://tlsrootca2025-crl.e-szigno.hu/tlsrootca2025.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:1a:fb:92:7a:85:7f:62:d0:95:82:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 30 15:15:00 2025 GMT
            Not After : Dec 30 09:14:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno RSA TLS Root CA 2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                7C:F1:E2:2E:C6:49:B1:03:78:C9:20:AD:E0:1C:9C:C4:4B:C9:7F:EC
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 53B6A499FCC6C04A18A56B574584484072E4A306E07B4DD72D31B105453A1300
    SPKI SHA256: 936F3A8FB6DD6507E80D2A316293B0455465A6D4C662928767DBF96D3285B788
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: F2634B7FA0AFC43797FE440A
- SHA-256: 45A0C311E31DAD443AF1F714A32CF353DA1225CA0780C172567210FFB9FB14A7
- SPKI SHA-256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
- Validity: 2023-07-19 to 2025-12-30
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://esmimeca2023-crl.e-szigno.hu/esmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:63:4b:7f:a0:af:c4:37:97:fe:44:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 19 16:00:00 2023 GMT
            Not After : Dec 30 17:00:00 2025 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:F9:C0:ED:59:16:70:28:16:E8:82:6B:99:3C:50:E0:89:C8:66:58
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 45A0C311E31DAD443AF1F714A32CF353DA1225CA0780C172567210FFB9FB14A7
    SPKI SHA256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### e-Szigno SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SMIME Root CA 2024
- Serial: 0111E1E9A2CE18065DF0F0140A
- SHA-256: 1215546B2B1D0A60EA0FE6F6389566E0AD69CE38D9EF41EC15395828D2F8FD6C
- SPKI SHA-256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
- Validity: 2024-07-31 to 2042-07-13
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA384

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://esmimeca2023-crl.e-szigno.hu/esmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://esmimerootca2024-ocsp.e-szigno.hu
- CRL DP: http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:11:e1:e9:a2:ce:18:06:5d:f0:f0:14:0a
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SMIME Root CA 2024
        Validity
            Not Before: Jul 31 17:00:00 2024 GMT
            Not After : Jul 13 17:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:F9:C0:ED:59:16:70:28:16:E8:82:6B:99:3C:50:E0:89:C8:66:58
            X509v3 Authority Key Identifier:
                06:66:F3:4B:7C:3F:6B:C2:BB:D9:43:E7:99:BA:C1:29:61:5B:8C:F1
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
            Authority Information Access:
                OCSP - URI:http://esmimerootca2024-ocsp.e-szigno.hu
                CA Issuers - URI:http://esmimerootca2024-ca.e-szigno.hu/esmimerootca2024.crt
    Signature Algorithm: ecdsa-with-SHA384
    SHA256 Fingerprint: 1215546B2B1D0A60EA0FE6F6389566E0AD69CE38D9EF41EC15395828D2F8FD6C
    SPKI SHA256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://esmimerootca2024-ocsp.e-szigno.hu
- AIA CA Issuers: http://esmimerootca2024-ca.e-szigno.hu/esmimerootca2024.crt
- CRL Distribution Points: http://esmimerootca2024-crl.e-szigno.hu/esmimerootca2024.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0123174B22E5819BDFE66FCF0A
- SHA-256: F49F1A6386E921E78F40FECE225635246586666E3BAD3E0FA047BCC9769B06FF
- SPKI SHA-256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
- Validity: 2025-02-12 to 2028-02-12
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://esmimeca2023-crl.e-szigno.hu/esmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:17:4b:22:e5:81:9b:df:e6:6f:cf:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Feb 12 11:00:00 2025 GMT
            Not After : Feb 12 10:59:59 2028 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                A9:F9:C0:ED:59:16:70:28:16:E8:82:6B:99:3C:50:E0:89:C8:66:58
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: F49F1A6386E921E78F40FECE225635246586666E3BAD3E0FA047BCC9769B06FF
    SPKI SHA256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno SMIME CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno SMIME CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: E91F24CB66A0421C516DE70A
- SHA-256: EDFB8A183C13D1B2530F8DE9BC5F0AAEBC7145DECA4FB5094A40B2F6A3987A7C
- SPKI SHA-256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
- Validity: 2023-07-19 to 2042-08-21
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_uni/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_uni/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://esmimeca2023-crl.e-szigno.hu/esmimeca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e9:1f:24:cb:66:a0:42:1c:51:6d:e7:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Jul 19 14:30:00 2023 GMT
            Not After : Aug 21 14:30:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno SMIME CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                E-mail Protection
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                A9:F9:C0:ED:59:16:70:28:16:E8:82:6B:99:3C:50:E0:89:C8:66:58
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: EDFB8A183C13D1B2530F8DE9BC5F0AAEBC7145DECA4FB5094A40B2F6A3987A7C
    SPKI SHA256: DCFB04136DB47AB40D33DEB61D13EFBD41745DC651764BA46B43219E2B62CC68
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: E-mail Protection
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno SSL CA

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SSL CA, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: 01B32B4EC2FB8BD0E955BF0A
- SHA-256: CFFBA85118B944C5AA85C49B281E46FF304FA0B75A5066A6933A6BF431FF82BB
- SPKI SHA-256: 1AC80794B3E43C37E77AA7FADBDA8CB639506FE7960B65E4EFAC89A1B16F0DB0
- Validity: 2011-09-13 to 2017-04-05
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/sslca.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: http://crl.e-szigno.hu/rootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b3:2b:4e:c2:fb:8b:d0:e9:55:bf:0a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Sep 13 12:00:00 2011 GMT
            Not After : Apr  5 12:00:00 2017 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SSL CA, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                7D:E8:09:89:6F:48:5E:36:C2:C6:3F:63:DB:E8:DE:80:71:EA:9B:A6
            X509v3 Authority Key Identifier:
                C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca.crl
            Authority Information Access:
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: CFFBA85118B944C5AA85C49B281E46FF304FA0B75A5066A6933A6BF431FF82BB
    SPKI SHA256: 1AC80794B3E43C37E77AA7FADBDA8CB639506FE7960B65E4EFAC89A1B16F0DB0
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: -
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_aia_ca_issuers
- is_expired

### e-Szigno SSL CA 2014

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=e-Szigno SSL CA 2014, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 535CD2A3AC13D9DC4A4B830A
- SHA-256: EAC241C0440A36830111383336BC20CAC7409C20F6E88D4F84F4827BE919E338
- SPKI SHA-256: 0EEBD7297A1B4E2B14EEE7C9A46558CCF4E0049DD58DEB5ADA4A59B46F6A5DCF
- Validity: 2014-07-08 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://sslca2014-crl1.e-szigno.hu/sslca2014.crl, http://sslca2014-crl2.e-szigno.hu/sslca2014.crl, http://sslca2014-crl3.e-szigno.hu/sslca2014.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:d2:a3:ac:13:d9:dc:4a:4b:83:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul  8 14:35:21 2014 GMT
            Not After : Dec 29 14:35:21 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = e-Szigno SSL CA 2014, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                DE:6A:B0:4E:43:AA:08:41:47:74:BF:A5:8A:81:54:4C:20:C5:75:28
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: EAC241C0440A36830111383336BC20CAC7409C20F6E88D4F84F4827BE919E338
    SPKI SHA256: 0EEBD7297A1B4E2B14EEE7C9A46558CCF4E0049DD58DEB5ADA4A59B46F6A5DCF
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_ext_san_rfc822_name_present: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TLS Root CA 2023

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TLS Root CA 2023
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 01442F5761D09EFF05BD9C740A
- SHA-256: 35328CDA9F14FEB62AC0CCAEE1B10101FD6F44ADD85A51311EA174FD361F4613
- SPKI SHA-256: 47487900A1BEB9EE08CCBC1116A8EC55F454B638994319F051B984023CED6423
- Validity: 2026-03-18 to 2029-12-30
- Key: EC 521 secp521r1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/tlsrootca2023.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: false
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:2f:57:61:d0:9e:ff:05:bd:9c:74:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar 18 14:00:00 2026 GMT
            Not After : Dec 30 09:14:59 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TLS Root CA 2023
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                TLS Web Server Authentication
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
            X509v3 Subject Key Identifier:
                59:84:02:62:5A:46:78:F5:5D:DC:8F:0A:10:28:23:DC:D5:D6:FB:45
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 35328CDA9F14FEB62AC0CCAEE1B10101FD6F44ADD85A51311EA174FD361F4613
    SPKI SHA256: 47487900A1BEB9EE08CCBC1116A8EC55F454B638994319F051B984023CED6423
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: TLS Web Server Authentication
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings


- [current] error e_cabf_ecc_allowed_key_usages: DigitalSignature key usage is required for certificates with ECC public keys

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_server_auth_eku
- has_certificate_policies
- has_any_policy
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: A98958CFD801AF006F1E690A
- SHA-256: 9E94BB8ADAD7A6CE4DCB1208F1239DC1E43483F1B7E81F74A90A20FB5E5C49B7
- SPKI SHA-256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
- Validity: 2017-09-17 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_bel/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2017-crl1.e-szigno.hu/etsaca2017.crl, http://etsaca2017-crl2.e-szigno.hu/etsaca2017.crl, http://etsaca2017-crl3.e-szigno.hu/etsaca2017.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a9:89:58:cf:d8:01:af:00:6f:1e:69:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 17 21:00:00 2017 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                FF:A3:1F:7E:71:FA:97:DF:F8:F9:85:44:34:78:F3:E7:D2:96:6D:63
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 9E94BB8ADAD7A6CE4DCB1208F1239DC1E43483F1B7E81F74A90A20FB5E5C49B7
    SPKI SHA256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: C779B0241770FB6DEF355F0A
- SHA-256: AE41954DAACBFD3E5B9FD7078F7B6FAAE61B559ECE79EF8ED858AD8C022A7A3C
- SPKI SHA-256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
- Validity: 2019-09-10 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2017-crl1.e-szigno.hu/etsaca2017.crl, http://etsaca2017-crl2.e-szigno.hu/etsaca2017.crl, http://etsaca2017-crl3.e-szigno.hu/etsaca2017.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:79:b0:24:17:70:fb:6d:ef:35:5f:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Sep 10 06:00:00 2019 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping, OCSP Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                FF:A3:1F:7E:71:FA:97:DF:F8:F9:85:44:34:78:F3:E7:D2:96:6D:63
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: AE41954DAACBFD3E5B9FD7078F7B6FAAE61B559ECE79EF8ED858AD8C022A7A3C
    SPKI SHA256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2017

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2017
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: C87EA0E9453B319854F24E0A
- SHA-256: 4DE7CCACB5099942644950F2CC86134012565C614D51AA7D3087FAC196958A14
- SPKI SHA-256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
- Validity: 2019-09-10 to 2029-09-29
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2017-crl1.e-szigno.hu/etsaca2017.crl, http://etsaca2017-crl2.e-szigno.hu/etsaca2017.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c8:7e:a0:e9:45:3b:31:98:54:f2:4e:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Sep 10 06:00:00 2019 GMT
            Not After : Sep 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2017
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping, OCSP Signing
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                FF:A3:1F:7E:71:FA:97:DF:F8:F9:85:44:34:78:F3:E7:D2:96:6D:63
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 4DE7CCACB5099942644950F2CC86134012565C614D51AA7D3087FAC196958A14
    SPKI SHA256: FB352BF8CD10131BD7AAA166A138C4A32A6D4D94FDFCC4B30F29C2E3120255CC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping, OCSP Signing
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.


- [historical] error e_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth: 

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2020

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2020
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: D2F05E9A83DB987AA5755E0A
- SHA-256: 7731FE893FD5461AD2BFAFBADC530CF69B6DA5095E3AEE0FF82EF54ADD4B8B57
- SPKI SHA-256: 859E6CCFB6932484405A8A89F7BAF4558F19E981077EB5AAEE75026749AC9EB1
- Validity: 2020-08-25 to 2029-09-29
- Key: EC 256 prime256v1
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2020-crl1.e-szigno.hu/etsaca2020.crl, http://etsaca2020-crl2.e-szigno.hu/etsaca2020.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:f0:5e:9a:83:db:98:7a:a5:75:5e:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 25 13:00:00 2020 GMT
            Not After : Sep 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                17:EA:8C:31:F5:4C:CD:35:12:AA:BB:A6:E5:36:83:10:65:EC:BF:39
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 7731FE893FD5461AD2BFAFBADC530CF69B6DA5095E3AEE0FF82EF54ADD4B8B57
    SPKI SHA256: 859E6CCFB6932484405A8A89F7BAF4558F19E981077EB5AAEE75026749AC9EB1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2020

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2020
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: D11C60534E95C90EA5B9600A
- SHA-256: B4C177E357565C99E90ED886D799F8C6BEFF806DA5A048551878489B9C27E488
- SPKI SHA-256: 859E6CCFB6932484405A8A89F7BAF4558F19E981077EB5AAEE75026749AC9EB1
- Validity: 2020-08-25 to 2042-08-22
- Key: EC 256 prime256v1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2020-crl1.e-szigno.hu/etsaca2020.crl, http://etsaca2020-crl2.e-szigno.hu/etsaca2020.crl, http://etsaca2020-crl3.e-szigno.hu/etsaca2020.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- CRL DP: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:1c:60:53:4e:95:c9:0e:a5:b9:60:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Aug 25 13:00:00 2020 GMT
            Not After : Aug 22 09:00:00 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2020
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                17:EA:8C:31:F5:4C:CD:35:12:AA:BB:A6:E5:36:83:10:65:EC:BF:39
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl1.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl2.e-szigno.hu/rootca2017.crl
                Full Name:
                  URI:http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2017-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca1.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca2.e-szigno.hu/rootca2017.crt
                CA Issuers - URI:http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: B4C177E357565C99E90ED886D799F8C6BEFF806DA5A048551878489B9C27E488
    SPKI SHA256: 859E6CCFB6932484405A8A89F7BAF4558F19E981077EB5AAEE75026749AC9EB1
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp1.e-szigno.hu, http://rootca2017-ocsp2.e-szigno.hu, http://rootca2017-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca1.e-szigno.hu/rootca2017.crt, http://rootca2017-ca2.e-szigno.hu/rootca2017.crt, http://rootca2017-ca3.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl1.e-szigno.hu/rootca2017.crl, http://rootca2017-crl2.e-szigno.hu/rootca2017.crl, http://rootca2017-crl3.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### e-Szigno TSA CA 2026

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno TSA CA 2026
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=e-Szigno Root CA 2017
- Serial: 014529EE18455DC6EBA5AE5D0A
- SHA-256: 3097F6BA226A5CB3F7D38E40117C9C4E8E7704BC612F36EA00B1FAE661DB500C
- SPKI SHA-256: 8B054D2A96174435787E3A731FD8DE2B062E8227D418D227638270C7201446C5
- Validity: 2026-06-04 to 2042-08-21
- Key: EC 521 secp521r1
- Signature Algorithm: ecdsa-with-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://etsaca2026-crl.e-szigno.hu/etsaca2026.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2017-ocsp.e-szigno.hu
- CRL DP: http://rootca2017-crl.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:45:29:ee:18:45:5d:c6:eb:a5:ae:5d:0a
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno Root CA 2017
        Validity
            Not Before: Jun  4 14:00:00 2026 GMT
            Not After : Aug 21 13:59:59 2042 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = e-Szigno TSA CA 2026
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Time Stamping
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                BC:26:69:9A:24:1B:30:13:25:A1:16:13:F2:E5:07:4C:4F:52:B9:06
            X509v3 Authority Key Identifier:
                87:11:15:08:D1:AA:C1:78:0C:B1:AF:CE:C6:C9:90:EF:BF:30:04:C0
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2017-crl.e-szigno.hu/rootca2017.crl
            Authority Information Access:
                OCSP - URI:http://rootca2017-ocsp.e-szigno.hu
                CA Issuers - URI:http://rootca2017-ca.e-szigno.hu/rootca2017.crt
    Signature Algorithm: ecdsa-with-SHA256
    SHA256 Fingerprint: 3097F6BA226A5CB3F7D38E40117C9C4E8E7704BC612F36EA00B1FAE661DB500C
    SPKI SHA256: 8B054D2A96174435787E3A731FD8DE2B062E8227D418D227638270C7201446C5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: Time Stamping
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2017-ocsp.e-szigno.hu
- AIA CA Issuers: http://rootca2017-ca.e-szigno.hu/rootca2017.crt
- CRL Distribution Points: http://rootca2017-crl.e-szigno.hu/rootca2017.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_eku
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Encryption e-Szigno CA5

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Encryption e-Szigno CA5
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: 744FC10B56A868B4A5E52AF1789916D1
- SHA-256: AF18C6716855C8CF44E9764269C99F4EA97417974E522F64C0C580178AF25756
- SPKI SHA-256: B883CE7E74979C01B8835FFD3AAD42D18872093ADD62222FD67C1E82A5D7775A
- Validity: 2006-10-05 to 2016-10-05
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/CA5.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4f:c1:0b:56:a8:68:b4:a5:e5:2a:f1:78:99:16:d1
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Oct  5 14:28:14 2006 GMT
            Not After : Oct  5 14:28:14 2016 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Encryption e-Szigno CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Titkos\xC3\xADt\xC3\xB3 e-Szign\xC3\xB3 CA5/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.2
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                71:7F:2B:F1:72:69:2B:B4:BE:93:8E:5F:F9:57:F1:00:05:9D:22:61
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: AF18C6716855C8CF44E9764269C99F4EA97417974E522F64C0C580178AF25756
    SPKI SHA256: B883CE7E74979C01B8835FFD3AAD42D18872093ADD62222FD67C1E82A5D7775A
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.2
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Microsec e-Szigno Root CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: E8849639AB66105A
- SHA-256: 72F9AF2158181BAF16D60C9B4E6F4BD7CA8D2341AD48AFDB67CB4C8332D546F6
- SPKI SHA-256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
- Validity: 2009-03-06 to 2038-01-18
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/rootca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e8:84:96:39:ab:66:10:5a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  6 13:29:43 2009 GMT
            Not After : Jan 18 13:29:43 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.0
                  CPS: http://cp.e-szigno.hu/qcps
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 72F9AF2158181BAF16D60C9B4E6F4BD7CA8D2341AD48AFDB67CB4C8332D546F6
    SPKI SHA256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls

### Microsec e-Szigno Root CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: C27E43044E473F18
- SHA-256: 8E8C6EBF77DC73DB3E38E93F4803E62B6B5933BEB51EE4152F68D7AA14426B31
- SPKI SHA-256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
- Validity: 2009-06-16 to 2029-12-30
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/rootca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: -
- CRL DP: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c2:7e:43:04:4e:47:3f:18
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 11:30:18 2009 GMT
            Not After : Dec 30 11:30:18 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.1
                  CPS: http://cp.e-szigno.hu/qcps
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 8E8C6EBF77DC73DB3E38E93F4803E62B6B5933BEB51EE4152F68D7AA14426B31
    SPKI SHA256: 616167201433AEA6C8E5E3070AFCAF6749188F814BD1ABB179AE8DAD3ABF26EC
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- AIA OCSP: -
- AIA CA Issuers: -
- CRL Distribution Points: -
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls

### Microsec e-Szigno Server CA

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Server CA
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: F497A03C74EA34B1C526CB3BBC85E21F
- SHA-256: D63D2FBD4088BB97F38BCE944E4B0251F935D4B09B97D160638265199764B609
- SPKI SHA-256: 83E6F0364CFB2B7A22021DD78279D56C2E7E2B222B632FCD8E85717EFBCDDB6E
- Validity: 2005-04-15 to 2015-04-15
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/SCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:97:a0:3c:74:ea:34:b1:c5:26:cb:3b:bc:85:e2:1f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Apr 15 10:39:26 2005 GMT
            Not After : Apr 15 10:39:26 2015 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Server CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Microsec e-Szign\xC3\xB3 Szerver CA/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            X509v3 Subject Key Identifier:
                35:1E:A5:87:3A:D8:CA:61:22:7C:07:65:C5:8D:18:98:E1:FE:36:6D
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: D63D2FBD4088BB97F38BCE944E4B0251F935D4B09B97D160638265199764B609
    SPKI SHA256: 83E6F0364CFB2B7A22021DD78279D56C2E7E2B222B632FCD8E85717EFBCDDB6E
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Online e-Szigno SSL CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Online e-Szigno SSL CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 8F816ED551C9924ED78FB10A
- SHA-256: 31DAA25D142D08B90E640D4BC50B249F0FE39785C98D5E53E233259C0FAE9398
- SPKI SHA-256: C74B74DAA869C3E3153EFA48E34F6067B2A53BD0BC4D9EB2A8D6136080E607DF
- Validity: 2016-08-29 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_fok_ssl/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_fok_ssl/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://osslca2016-crl1.e-szigno.hu/osslca2016.crl, http://osslca2016-crl2.e-szigno.hu/osslca2016.crl, http://osslca2016-crl3.e-szigno.hu/osslca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8f:81:6e:d5:51:c9:92:4e:d7:8f:b1:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 29 02:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Online e-Szigno SSL CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                93:70:93:95:63:FF:B1:34:02:AF:76:9B:10:1A:14:D8:EF:E2:DB:FC
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 31DAA25D142D08B90E640D4BC50B249F0FE39785C98D5E53E233259C0FAE9398
    SPKI SHA256: C74B74DAA869C3E3153EFA48E34F6067B2A53BD0BC4D9EB2A8D6136080E607DF
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno CA

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Qualified e-Szigno CA
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: F267093A96D0BE9A93A4CFACF38655D8
- SHA-256: D0F8E87AFB730B4DB95B3B794585A5E84172B1B0F805F46EBC2AFCDF41C84AC8
- SPKI SHA-256: 0EFE0AD7F102EEF89DBD1FF77EB1345C457770EF26EB7713F94BE27094BF63A5
- Validity: 2005-04-09 to 2015-04-09
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/CA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:67:09:3a:96:d0:be:9a:93:a4:cf:ac:f3:86:55:d8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Apr  9 17:42:12 2005 GMT
            Not After : Apr  9 17:42:10 2015 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Qualified e-Szigno CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Min\xC5\x91s\xC3\xADtett e-Szign\xC3\xB3 CA/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                FA:94:27:E7:5A:49:E8:14:E0:AA:C8:5F:06:EF:43:27:93:BD:33:E5
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: D0F8E87AFB730B4DB95B3B794585A5E84172B1B0F805F46EBC2AFCDF41C84AC8
    SPKI SHA256: 0EFE0AD7F102EEF89DBD1FF77EB1345C457770EF26EB7713F94BE27094BF63A5
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Qualified e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 01
- SHA-256: 8C3932A0622DB2266380BD7A0C0C63D2A7E2B87356E335713980AD9FC9A565C3
- SPKI SHA-256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
- Validity: 2009-03-09 to 2038-01-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  9 20:43:40 2009 GMT
            Not After : Jan 17 20:43:40 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.0
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                D1:8A:63:FE:CB:08:FD:E9:4A:17:68:01:AD:3C:0E:D5:DD:97:F7:04
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 8C3932A0622DB2266380BD7A0C0C63D2A7E2B87356E335713980AD9FC9A565C3
    SPKI SHA256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0B
- SHA-256: 78A8C3E45B35CDB7D35410751773A9753CEB86612A92B25607743154B8E85F7E
- SPKI SHA-256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
- Validity: 2009-06-16 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 14:31:35 2009 GMT
            Not After : Dec 29 14:31:35 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.1
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                D1:8A:63:FE:CB:08:FD:E9:4A:17:68:01:AD:3C:0E:D5:DD:97:F7:04
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 78A8C3E45B35CDB7D35410751773A9753CEB86612A92B25607743154B8E85F7E
    SPKI SHA256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 16
- SHA-256: B884ED6527433687627D35157E904690D2DFF6A5DCD3CE267BBAF159C06F5054
- SPKI SHA-256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                D1:8A:63:FE:CB:08:FD:E9:4A:17:68:01:AD:3C:0E:D5:DD:97:F7:04
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: B884ED6527433687627D35157E904690D2DFF6A5DCD3CE267BBAF159C06F5054
    SPKI SHA256: 67DD663377C87C02DC9933C14B9E1F41E1E9237B86B9483D920924EC30EFF857
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno Organization CA 2016

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497-2-41, commonName=Qualified e-Szigno Organization CA 2016
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 90274984CBF0D2D9AFAFF30A
- SHA-256: 60AF9E5F39D873B236BE142BC706DA571849AED7FAE635FC5A1461A0CF7459C5
- SPKI SHA-256: 596A45DB9D39E707E371906FEF93F51EA12B2A7A5280663945384B96D559FAEA
- Validity: 2016-08-29 to 2029-12-29
- Key: RSA 4096
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_bel/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_bel/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qoca2016.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            90:27:49:84:cb:f0:d2:d9:af:af:f3:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Aug 29 02:00:00 2016 GMT
            Not After : Dec 29 20:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497-2-41, CN = Qualified e-Szigno Organization CA 2016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                B1:18:8F:B2:B9:38:D2:9E:67:37:7B:78:15:59:3B:AF:FA:00:17:B2
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: 60AF9E5F39D873B236BE142BC706DA571849AED7FAE635FC5A1461A0CF7459C5
    SPKI SHA256: 596A45DB9D39E707E371906FEF93F51EA12B2A7A5280663945384B96D559FAEA
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno PCA

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Qualified e-Szigno PCA
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationalUnitName=e-Szigno CA, commonName=Microsec e-Szigno Root CA
- Serial: 5860E67EE0F49AEAE5669BF296715281
- SHA-256: A4A9E863F880CA69F99B5D1666FC17A0CAE8F39728FF291D5454B14E541A3C66
- SPKI SHA-256: 003A6CC473145B84E3732B3131BA1D0E5ADAD59A094DCAA079483824F66F34CF
- Validity: 2005-06-14 to 2015-06-14
- Key: RSA 2048
- Signature Algorithm: RSA-SHA1

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://www.e-szigno.hu/PCA.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: true
- Revoked: false
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- CRL DP: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:e6:7e:e0:f4:9a:ea:e5:66:9b:f2:96:71:52:81
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Microsec e-Szigno Root CA
        Validity
            Not Before: Jun 14 11:31:40 2005 GMT
            Not After : Jun 14 11:31:40 2015 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., OU = e-Szigno CA, CN = Qualified e-Szigno PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu, DirName:/CN=Min\xC5\x91s\xC3\xADtett e-Szign\xC3\xB3 PCA/OU=e-Szign\xC3\xB3 HSZ/O=Microsec Kft./L=Budapest/C=HU
            Authority Information Access:
                OCSP - URI:https://rca.e-szigno.hu/ocsp
                CA Issuers - URI:http://www.e-szigno.hu/RootCA.crt
            X509v3 Authority Key Identifier:
                keyid:C7:A0:49:75:16:61:84:DB:31:4B:84:D2:F1:37:40:90:EF:4E:DC:F7
                DirName:/C=HU/L=Budapest/O=Microsec Ltd./OU=e-Szigno CA/CN=Microsec e-Szigno Root CA
                serial:CC:B8:E7:BF:4E:29:1A:FD:A2:DC:66:A5:1C:2C:0F:11
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1
                  CPS: http://www.e-szigno.hu/SZSZ/
                  User Notice:
                    Explicit Text:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://www.e-szigno.hu/RootCA.crl
                  URI:ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA,OU=e-Szigno%20CA,O=Microsec%20Ltd.,L=Budapest,C=HU?certificateRevocationList;binary
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                7C:31:4A:A4:6F:D8:48:53:8E:57:97:CC:84:62:5B:77:A1:1C:25:0A
    Signature Algorithm: sha1WithRSAEncryption
    SHA256 Fingerprint: A4A9E863F880CA69F99B5D1666FC17A0CAE8F39728FF291D5454B14E541A3C66
    SPKI SHA256: 003A6CC473145B84E3732B3131BA1D0E5ADAD59A094DCAA079483824F66F34CF
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1
- AIA OCSP: https://rca.e-szigno.hu/ocsp
- AIA CA Issuers: http://www.e-szigno.hu/RootCA.crt
- CRL Distribution Points: http://www.e-szigno.hu/RootCA.crl, ldap://ldap.e-szigno.hu/CN=Microsec%20e-Szigno%20Root%20CA
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
- is_expired

### Qualified e-Szigno QCP CA 2012

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified e-Szigno QCP CA 2012, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 2EEBA3B3AF911A4B31BDB10A
- SHA-256: CFCB60C1F0180C68E3EA5D24B4A05E9D9900D87C3D83D503CE1690B3C1656458
- SPKI SHA-256: C5AD5DA443AEFA4D6C85C88692977E7634B492F1C93CE9A7BEA8DAFB5E92DA8D
- Validity: 2012-03-30 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qcpca2012.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:eb:a3:b3:af:91:1a:4b:31:bd:b1:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar 30 12:00:00 2012 GMT
            Not After : Dec 29 12:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified e-Szigno QCP CA 2012, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                CC:3D:46:E8:65:00:BB:EA:C3:BD:CF:B7:88:E1:95:FF:53:79:A3:B4
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: CFCB60C1F0180C68E3EA5D24B4A05E9D9900D87C3D83D503CE1690B3C1656458
    SPKI SHA256: C5AD5DA443AEFA4D6C85C88692977E7634B492F1C93CE9A7BEA8DAFB5E92DA8D
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified e-Szigno TLS CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Qualified e-Szigno TLS CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: B86EDF27D8F6967C6470630A
- SHA-256: F7C7E28FB5E79F314AAAC6BBBA932F15E1A72069F435D4C9E707F93CA1482EE3
- SPKI SHA-256: 07E90976056EFAC40A4D1BAB3B994E90194343EDBE51F55C81634F55C276B284
- Validity: 2018-07-31 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://qtlsca2018-crl1.e-szigno.hu/qtlsca2018.crl, http://qtlsca2018-crl2.e-szigno.hu/qtlsca2018.crl, http://qtlsca2018-crl3.e-szigno.hu/qtlsca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:6e:df:27:d8:f6:96:7c:64:70:63:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jul 31 09:00:00 2018 GMT
            Not After : Dec 29 09:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = Qualified e-Szigno TLS CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                7D:84:4E:C2:D4:6B:EA:C1:D7:22:8C:68:C3:E9:A0:F4:EC:98:8A:1C
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: F7C7E28FB5E79F314AAAC6BBBA932F15E1A72069F435D4C9E707F93CA1482EE3
    SPKI SHA256: 07E90976056EFAC40A4D1BAB3B994E90194343EDBE51F55C81634F55C276B284
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified KET e-Szigno CA 2018

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., organizationIdentifier=VATHU-23584497, commonName=Qualified KET e-Szigno CA 2018
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: BC3D9A56D441A2BB5987620A
- SHA-256: D9E445B22C6FCB37B296FCD1331486569651A8DB98071753FEFC73D2C97BF732
- SPKI SHA-256: A249C97C0E87A485B71AEBF6F51F2D9664B98408068E18547E906C64FBB63DDB
- Validity: 2018-09-06 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qkca2018.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- CRL DP: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bc:3d:9a:56:d4:41:a2:bb:59:87:62:0a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Sep  6 09:00:00 2018 GMT
            Not After : Dec 29 09:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., organizationIdentifier = VATHU-23584497, CN = Qualified KET e-Szigno CA 2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/acps
            X509v3 Subject Key Identifier:
                55:46:0C:F9:D3:99:A3:D4:6C:06:CB:FD:78:DE:47:E7:7B:3E:1E:95
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://rootca2009-crl1.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl2.e-szigno.hu/rootca2009.crl
                Full Name:
                  URI:http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootca2009-ocsp1.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp2.e-szigno.hu
                OCSP - URI:http://rootca2009-ocsp3.e-szigno.hu
                CA Issuers - URI:http://rootca2009-ca1.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca2.e-szigno.hu/rootca2009.crt
                CA Issuers - URI:http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: D9E445B22C6FCB37B296FCD1331486569651A8DB98071753FEFC73D2C97BF732
    SPKI SHA256: A249C97C0E87A485B71AEBF6F51F2D9664B98408068E18547E906C64FBB63DDB
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootca2009-ocsp1.e-szigno.hu, http://rootca2009-ocsp2.e-szigno.hu, http://rootca2009-ocsp3.e-szigno.hu
- AIA CA Issuers: http://rootca2009-ca1.e-szigno.hu/rootca2009.crt, http://rootca2009-ca2.e-szigno.hu/rootca2009.crt, http://rootca2009-ca3.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://rootca2009-crl1.e-szigno.hu/rootca2009.crl, http://rootca2009-crl2.e-szigno.hu/rootca2009.crl, http://rootca2009-crl3.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 0C
- SHA-256: BCAD9BEC74AF54CAC4839722E3B6CA774BD9CA74C43911A4C28FA9F924D9BE67
- SPKI SHA-256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
- Validity: 2009-06-16 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qpca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Jun 16 14:35:25 2009 GMT
            Not After : Dec 29 14:35:25 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.1
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                92:7D:B6:45:50:0E:EF:96:30:67:B4:E9:D0:D3:44:79:48:4F:20:CB
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: BCAD9BEC74AF54CAC4839722E3B6CA774BD9CA74C43911A4C28FA9F924D9BE67
    SPKI SHA256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.1
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 02
- SHA-256: A9FD4BD7359B642FEA92A6F828C6A2FE03C0970B38462D85772CBED661058535
- SPKI SHA-256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
- Validity: 2009-03-09 to 2038-01-17
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: -
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qpca2009.crl
- Revocation status: Revoked
- Browser status: {"apple":"Not Trusted","chrome":"Not Trusted","microsoft":"Not Trusted","mozilla":"Not Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: true
- Currently valid: false
- Lint surface: historical
- Audit visibility reason: Certificate is revoked and/or expired

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- anyPolicy: false
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Mar  9 20:44:07 2009 GMT
            Not After : Jan 17 20:44:07 2038 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: 1.3.6.1.4.1.21528.2.1.1.1.5.0
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                92:7D:B6:45:50:0E:EF:96:30:67:B4:E9:D0:D3:44:79:48:4F:20:CB
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: A9FD4BD7359B642FEA92A6F828C6A2FE03C0970B38462D85772CBED661058535
    SPKI SHA256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 1.3.6.1.4.1.21528.2.1.1.1.5.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

#### Historical zlint Findings

This certificate is revoked and/or expired. Findings are retained for historical/profile review and are not treated as current active audit issues.

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers

### Qualified Pseudonymous e-Szigno CA 2009

- Subject: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Qualified Pseudonymous e-Szigno CA 2009, emailAddress=info@e-szigno.hu
- Issuer: countryName=HU, localityName=Budapest, organizationName=Microsec Ltd., commonName=Microsec e-Szigno Root CA 2009, emailAddress=info@e-szigno.hu
- Serial: 17
- SHA-256: F8684D2812BA98A52FE94528C4CB152378A2D73A828810A8C7B8529875C64674
- SPKI SHA-256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
- Validity: 2009-12-02 to 2029-12-29
- Key: RSA 2048
- Signature Algorithm: RSA-SHA256

#### CCADB Disclosure Snapshot

- Subordinate CA Owner: -
- CP/CPS: https://e-szigno.hu/docs/latest-regulation/eidas_hr_min_ala/eng, https://e-szigno.hu/docs/latest-regulation/eidas_szsz_min_ala/eng
- CP/CPS same as parent: false
- Audit URLs: -
- Audit same as parent: true
- CRLs issued by this CA disclosed in CCADB: http://crl.e-szigno.hu/qpca2009.crl
- Revocation status: Not Revoked
- Browser status: {"apple":"Trusted","chrome":"Trusted","microsoft":"Trusted","mozilla":"Trusted"}
- Certificate type: Intermediate Certificate

#### Lifecycle Snapshot

- Expired: false
- Revoked: false
- Currently valid: true
- Lint surface: current
- Audit visibility reason: -

#### Profile Snapshot

- CA: true
- pathLen: -
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- anyPolicy: true
- CABF TLS policy OID: -
- CPS qualifier: true
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- CRL DP: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### Parsed Certificate

```text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = HU, L = Budapest, O = Microsec Ltd., CN = Microsec e-Szigno Root CA 2009, emailAddress = info@e-szigno.hu
        Validity
            Not Before: Dec  2 16:00:00 2009 GMT
            Not After : Dec 29 16:00:00 2029 GMT
        Subject: C = HU, L = Budapest, O = Microsec Ltd., CN = Qualified Pseudonymous e-Szigno CA 2009, emailAddress = info@e-szigno.hu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Certificate Policies:
                Policy: X509v3 Any Policy
                  CPS: http://cp.e-szigno.hu/qcps
            X509v3 Subject Key Identifier:
                92:7D:B6:45:50:0E:EF:96:30:67:B4:E9:D0:D3:44:79:48:4F:20:CB
            X509v3 Authority Key Identifier:
                CB:0F:C6:DF:42:43:CC:3D:CB:B5:48:23:A1:1A:7A:A6:2A:BB:34:68
            X509v3 Subject Alternative Name:
                email:info@e-szigno.hu
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://crl.e-szigno.hu/rootca2009.crl
            Authority Information Access:
                OCSP - URI:http://rootocsp2009.e-szigno.hu
                CA Issuers - URI:http://www.e-szigno.hu/rootca2009.crt
    Signature Algorithm: sha256WithRSAEncryption
    SHA256 Fingerprint: F8684D2812BA98A52FE94528C4CB152378A2D73A828810A8C7B8529875C64674
    SPKI SHA256: 43E30CF5AE485694C9723CC407B5B2AFF2862E91F8CBFD55E30B798783498D07
```

#### Extensions

- Basic Constraints: {"present":true,"critical":true,"ca":true,"path_len":null}
- Key Usage: keyCertSign, cRLSign
- EKU: -
- Certificate Policies: 2.5.29.32.0
- AIA OCSP: http://rootocsp2009.e-szigno.hu
- AIA CA Issuers: http://www.e-szigno.hu/rootca2009.crt
- CRL Distribution Points: http://crl.e-szigno.hu/rootca2009.crl
- Name Constraints: {"present":false,"critical":false,"permitted":[],"excluded":[]}

#### zlint Findings

- available

#### Computed Flags

- is_subordinate_ca
- has_basic_constraints
- is_ca
- has_key_usage
- has_certificate_policies
- has_any_policy
- has_policy_qualifier
- has_cps_uri
- has_http_urls
- has_crldp
- has_ocsp
- has_aia_ca_issuers
