*.open.10086.cn

- China Mobile Information Technology Co.,Ltd. -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 6d:93:03:00:8d:d9:4f:47:95:c1:b8:14:2e:db:1c:c6 was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

China Mobile Information Technology Co.,Ltd.

Organization: China Mobile Information Technology Co.,Ltd.
State / Province: Beijing
Locality: Beijing
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 6d:93:03:00:8d:d9:4f:47:95:c1:b8:14:2e:db:1c:c6
Serial Number (int): 145649180069889358438048338108143574214
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8c:a5:c0:c6:67:77:35:36:4a:06:47:8d:9d:3a:cc:e5:b2:1a:4c:f6
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): f2:c7:1a:dc:ac:ee:34:e7:66:f7:30:72:10:8b:a3:87:f7:3a:4b:f4
Fingerprint (sha256): 04:c9:2b:f5:14:67:c2:3c:31:3c:20:bb:2a:9d:0f:39:e7:9f:e3:3b:e9:cd:f5:7f:c3:fa:70:4d:2e:05:89:5d

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.open.10086.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.open.10086.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.open.10086.cn
open.10086.cn

Other certificates including the domain name 10086.cn

(limited to 100 certificates)
img1.shop.10086.cn
www.jl.10086.cn
*.zj.10086.cn
*.ecloud.10086.cn
uc.ipower.10086.cn
open.jf.10086.cn
img02.js.10086.cn
att2.edu.hl.10086.cn
p.10086.cn
www.sx.10086.cn
mas.ecloud.10086.cn
h5.bj.10086.cn
www.cq.10086.cn
hdh.10086.cn
www.edu.hl.10086.cn
wap.sc.10086.cn
znjs.hn.10086.cn
*.mail.10086.cn
caiyun.feixin.10086.cn
www.hn.10086.cn
mas.ecloud.10086.cn
b2bjoy.10086.cn
*.open.10086.cn
*.health.10086.cn
www.ha.10086.cn
wap.gd.10086.cn
*.jf.10086.cn
wap.he.10086.cn
*.open.10086.cn
img02.js.10086.cn
img02.js.10086.cn
weixin.he.10086.cn
wap.gd.10086.cn
cmii.10086.cn
img0.shop.10086.cn
wap.xj.10086.cn
m.jf.10086.cn
service.cq.10086.cn
*.edu.10086.cn
*.ac.10086.cn
www.edu.hl.10086.cn
www.sd.10086.cn
hdh.10086.cn
*.f.10086.cn
*.pnt.10086.cn
*.ecloud.10086.cn
open.jf.10086.cn
xnq.r.10086.cn
service.hb.10086.cn
www.hb.10086.cn
p.10086.cn
www.hc.10086.cn
rd.go.10086.cn
service.cq.10086.cn
iot.10086.cn
www.ln.10086.cn
www.sd.10086.cn
wap.hi.10086.cn
r.10086.cn
open.home.10086.cn
class.edu.hl.10086.cn
openapi.gd.10086.cn
push.it.10086.cn
*.clientaccess.10086.cn
*.ac.10086.cn
dev.10086.cn
www.he.10086.cn
wapmail.10086.cn
hbq.r.10086.cn
wap.gs.10086.cn
*.open.10086.cn
www.gx.10086.cn
service.cq.10086.cn
*.ac.10086.cn
wap.sc.10086.cn
wap.js.10086.cn
service.cq.10086.cn
b2bjoy.10086.cn
zhengqi.10086.cn
www.ha.10086.cn
p.10086.cn
www.he.10086.cn
poolaos.ecloud.10086.cn
auth.weibo.10086.cn
www.gx.10086.cn
open.iot.10086.cn
wap.sc.10086.cn
wap.sx.10086.cn
service.ha.10086.cn
*.clientaccess.10086.cn
www.gz.10086.cn
b2b.10086.cn
wap.jx.10086.cn
service.cq.10086.cn
m.sd.10086.cn
www.sh.10086.cn
es.b2b.10086.cn
zhengqi.10086.cn
wap.sc.10086.cn
logdownload.cmcdn.cdn.10086.cn

Certificate

The complete raw certificate details for *.open.10086.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWH+G5x45ECxrzpvWrco
dHdsTZYOWU2WeP24iimrmAE8ljRodPcM2IFYoqEK5SALd2poNyBNG7N1On6mnbl7
h2gTCEaGJZFPjY9ZcuCGwvHi369RE5KyjINKAYC+UFi5IxnROaqXgozKlzNEjEV0
u3tjZjOwmKc922DYONCfnOK1/m2oHrGbO/TCQV5oPmaM/5GK5PiHKPnIFmLEACKI
vXRTTztZg+/QiIJnP98hVGZe5Kn0HCvL2S2NkUQ0+Bkk1Q+pyefLSYarlMHnmdjJ
yQsPddY1Mt997xYIntutYFWdX0TEvYNiQLfhFGjb2o1q6ke5emKu8qwcKO+zN+A5
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145649180069889358438048338108143574214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 09:22:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Mobile Information Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.open.10086.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20877642275789724265907810300810378442245092455689916312606047375038135274247493369833007295804194681573572323892592052151598166792441294713950654132178340506398535737468471056323563177180658240814901052757577172969172072072627313215389866344662677699460708134329165958663958303495331666108722090939934923496847743522829365507332755027686574489040306391912671332969635272260081669333228367605997032413476474771107982615056087006426878375793684633121030208110742374441755304540060823577651979739838351412193612165621229997430665086404999582920864823268898996533264562050720452042605652682879951389092389359330757982687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open.10086.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.10086.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ca5c0c6677735364a06478d9d3acce5b21a4cf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008480edc1b312701c29402fd067d71e28d7d74793906fbaf81fcf3f86365da319982160b3c2e29f16d63209fc2c3bb160a94922f482f0bd6e696298ccb442c40f21454addd310b0d2e0d7fd586191981e462e5946812760096007f5f9b043783ed69ab9efdf5f6d3825f4f51e93ba7061af8987a2254b46bf5eaa7c508900c97560023aa2b1eca863f38e68a6e21d3f8ac96c23d0272b89f7468b72a082647e53a1193f4c7f4ea8ea277535a322d6f5e53926f2d623d6ba031aa20d2d1365c5a35916f7777ea70deba54a1f2840faba2f85aeb95e766ae66d585d285bdf7ad8e293d544671573c91cd206f5ad9881da1b31d2bdb02e2f4be4749312fd5b20306d