img02.js.10086.cn

- China Mobile Communications Group Co., Ltd. -

Issued by Secure Site Pro CA

About this certificate

This digital certificate with serial number 05:8a:45:3e:80:cc:a5:ed:f1:eb:c4:80:5a:6f:51:3a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Mobile Communications Group Co., Ltd.

Organization: China Mobile Communications Group Co., Ltd.
Organization unit: Department of Business Support System
State / Province: Beijing
Locality: Beijing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8a:45:3e:80:cc:a5:ed:f1:eb:c4:80:5a:6f:51:3a
Serial Number (int): 7364081383672599131018241902153519418
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:25:f6:4f:2e:b4:77:89:e9:ba:8a:9d:7f:3a:d4:bc:2d:84:7d:c2
AuthorityKeyId: 45:41:e3:93:54:70:b8:e9:a5:b7:96:bc:26:b1:58:75:42:97:3e:f3

Fingerprint (sha1): 44:e9:83:77:f5:82:a1:e5:56:01:c1:98:b0:68:33:7e:b3:22:b0:29
Fingerprint (sha256): 06:72:3b:be:32:39:5c:cd:ab:5b:43:86:8b:ea:70:e7:c5:db:c6:6a:42:c7:ba:fb:8b:90:46:b3:a8:18:21:3e

Issuing Certificate URL: http://cacerts.digicert-cn.com/SecureSiteProCA.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://cdp1.digicert.com/SecureSiteProCA.crl

Check the revocation status for certificate img02.js.10086.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img02.js.10086.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img02.js.10086.cn

Other certificates including the domain name 10086.cn

(limited to 100 certificates)
img1.shop.10086.cn
www.jl.10086.cn
*.zj.10086.cn
*.ecloud.10086.cn
uc.ipower.10086.cn
open.jf.10086.cn
img02.js.10086.cn
att2.edu.hl.10086.cn
p.10086.cn
www.sx.10086.cn
mas.ecloud.10086.cn
h5.bj.10086.cn
www.cq.10086.cn
hdh.10086.cn
www.edu.hl.10086.cn
wap.sc.10086.cn
znjs.hn.10086.cn
*.mail.10086.cn
caiyun.feixin.10086.cn
www.hn.10086.cn
mas.ecloud.10086.cn
b2bjoy.10086.cn
*.open.10086.cn
*.health.10086.cn
www.ha.10086.cn
wap.gd.10086.cn
*.jf.10086.cn
wap.he.10086.cn
*.open.10086.cn
img02.js.10086.cn
img02.js.10086.cn
weixin.he.10086.cn
wap.gd.10086.cn
cmii.10086.cn
img0.shop.10086.cn
wap.xj.10086.cn
m.jf.10086.cn
service.cq.10086.cn
*.edu.10086.cn
*.ac.10086.cn
www.edu.hl.10086.cn
www.sd.10086.cn
hdh.10086.cn
*.f.10086.cn
*.pnt.10086.cn
*.ecloud.10086.cn
open.jf.10086.cn
xnq.r.10086.cn
service.hb.10086.cn
www.hb.10086.cn
p.10086.cn
www.hc.10086.cn
rd.go.10086.cn
service.cq.10086.cn
iot.10086.cn
www.ln.10086.cn
www.sd.10086.cn
wap.hi.10086.cn
r.10086.cn
open.home.10086.cn
class.edu.hl.10086.cn
openapi.gd.10086.cn
push.it.10086.cn
*.clientaccess.10086.cn
*.ac.10086.cn
dev.10086.cn
www.he.10086.cn
wapmail.10086.cn
hbq.r.10086.cn
wap.gs.10086.cn
*.open.10086.cn
www.gx.10086.cn
service.cq.10086.cn
*.ac.10086.cn
wap.sc.10086.cn
wap.js.10086.cn
service.cq.10086.cn
b2bjoy.10086.cn
zhengqi.10086.cn
www.ha.10086.cn
p.10086.cn
www.he.10086.cn
poolaos.ecloud.10086.cn
auth.weibo.10086.cn
www.gx.10086.cn
open.iot.10086.cn
wap.sc.10086.cn
wap.sx.10086.cn
service.ha.10086.cn
*.clientaccess.10086.cn
www.gz.10086.cn
b2b.10086.cn
wap.jx.10086.cn
service.cq.10086.cn
m.sd.10086.cn
www.sh.10086.cn
es.b2b.10086.cn
zhengqi.10086.cn
wap.sc.10086.cn
logdownload.cmcdn.cdn.10086.cn

Certificate

The complete raw certificate details for img02.js.10086.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz0NNVhhyPShkOn2SZyb
hUU+lc42BYbX/JquUDgjlLaoBs/quyjF2nD6xeOVeQXTM7lRt2HL5Mm+glqJakiO
fepYaiDUZTJtClUoZ2wbsqY+IeVe40EdUp2WNsL0FbFsdxDg0aDAp/myW++Fseng
UjHxDz02PJjU906V2ZiPrLkLk6iKIBuNWYjJ0thWWYy7jfo0I+fRXaEQhp6Phdk+
nZSCm/aK0Z4I4Jh6K7tllrP7kRgvWS6L4MU8K4Ccnw3hBg8Gh7P4fr4XT6Aym60y
Gn+mlvozOcAOr5PgA+oxeve/F1pGXAdhy/ONZeJkTGPvVMfYzqtdqzmCCnW1pv/5
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7364081383672599131018241902153519418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Site Pro CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Mobile Communications Group Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Business Support System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img02.js.10086.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20101996153266556722473053365606322954370457634842675609419276835188535666013816978669008155727112886885789598141506057305352689755425602286833238438269527164027980518389582249426280313297324527501287298471814469853804909864209339156457495958563039507570221206405404864486901483602301342258604921076671775744691970715735652957686043094845954392831982029817035648413100906825779890904941262747942145976461292007530603796002693433857092709018634766782170038642034087347279187216761565847753756969083417736543105192916319436957829328550220588918012110910985188530433469246048563294964748730483424482212603327812831541557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4541e3935470b8e9a5b796bc26b1587542973ef3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf25f64f2eb47789e9ba8a9d7f3ad4bc2d847dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img02.js.10086.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.digicert.com/SecureSiteProCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert-cn.com/SecureSiteProCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001687483e5620000040300473045022100bb95c5dd4a0d074fa9473da9d7a2781322c8dad6ad11a72bae1c2dc5e06b814602207603c49ce81c2310512dfefa566fcd3a2031d8c74e4bcb1441b9298e451457730076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001687483e6360000040300473045022100c16b56b09b0986b98c9a00bf2e73dd3502fa1448f5c2184b4f182fe670cf57d902201d13ec9293c814daf69e49e4782dfb70db03ad46db4962ae8f2cda892884a635
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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