resourcephs.vmall.com

- Huawei Software Technologies CO.Ltd -

Issued by CFCA OV OCA

About this certificate

This digital certificate with serial number 20:15:01:e2:63:49:8b:a2:2a:7a:48:d9:8c:f2:e8:34 was issued on by China Financial Certification Authority.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Huawei Software Technologies CO.Ltd

Organization: Huawei Software Technologies CO.Ltd
Organization unit: Cloud Platform EUDR Dept
State / Province: JiangSu
Locality: nanjing
Country: CN

China Financial Certification Authority

Organization: China Financial Certification Authority
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 20:15:01:e2:63:49:8b:a2:2a:7a:48:d9:8c:f2:e8:34
Serial Number (int): 42644372317848798146051213991169157172
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a1:db:d2:c0:c7:cb:62:6d:54:aa:b6:b4:ee:e3:00:f6:97:79:63:c1
AuthorityKeyId: 66:b3:ef:fb:54:95:87:e9:ac:a5:96:56:ae:e6:7d:ed:3a:d0:43:d1

Fingerprint (sha1): 7f:68:6f:7f:17:f4:6d:cb:a5:96:fc:52:b0:19:bf:b9:45:6d:73:e9
Fingerprint (sha256): 07:bd:0b:24:3a:c0:2f:af:36:80:27:91:5c:56:00:72:f1:95:3c:b6:a8:0e:68:8e:04:50:36:44:78:9a:8b:c8

Issuing Certificate URL: http://gtc.cfca.com.cn/ovoca/ovoca.cer

Revocation information

OCSP Server: http://ocsp.cfca.com.cn/ocsp
CRL Distribution Point: http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl

Check the revocation status for certificate resourcephs.vmall.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resourcephs.vmall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resourcephs.vmall.com
resourcephs.dbankcloud.com
resourcephs.dbankcloud.cn

Other certificates including the domain name vmall.com

(limited to 100 certificates)
hwid.vmall.com
clubstyle.club.vmall.com
*.vmall.com
phstoqabiforeu.vmall.com
phoneservice3mgr.vmall.com
resourcephs.vmall.com
api3.vmall.com
resourcephs.vmall.com
*.cs.vmall.com
up7.vmall.com
*.vmall.com
*.vmall.com
hotalkm.vmall.com
phoneservice3mgr.vmall.com
resourcephs3.vmall.com
*.vmall.com
hwid.vmall.com
appgallery.cloud.huawei.com
hotalkcms.vmall.com
*.bd.vmall.com
appstore.huawei.com
hwid7.vmall.com
*.test.vmall.com
api.vmall.com
appgallery.cloud.huawei.com
hwid7.vmall.com
*.vmall.com
phoneservice3.vmall.com
appstore.huawei.com
game.vmall.com
cn.ui.vmall.com
open-cloudwifi.vmall.com
hwid7.vmall.com
*.tp.vmall.com
hwid.vmall.com
cn.ui.vmall.com
*.club.vmall.com
appstore.huawei.com
open-cloudwifi.vmall.com
id.cloud.huawei.com
*.vmall.com
cn.ui.vmall.com
theme-drru.emui.dbankcloud.com
clubstyle.club.vmall.com
appgallery.cloud.huawei.com
setting8.hicloud.com
appstore.huawei.com
vmall.com
appgallery.cloud.huawei.com
nfcws.hicloud.com
*.bd.vmall.com
phoneservice3.vmall.com
phoneservice.vmall.com
update-nl.huawei.com
phoneservice3.vmall.com
api3.vmall.com
appstore.huawei.com
*.vmall.com
setting8.hicloud.com
cn.ui.vmall.com
www.szsharelink.com
*.vmall.com
login3.vmall.com
cn.ui.vmall.com
*.vmall.com
phoneservice3mgr.vmall.com
*.vmall.com
*.vmall.com
open-cloudwifi.vmall.com
*.inner.vmall.com
*.vmall.com
resourcephs3.vmall.com
up7.vmall.com
*.vmall.com
phoneservice3mgr.vmall.com
hwid7.vmall.com
hwid7.vmall.com
*.test.vmall.com
open-cloudwifi.vmall.com
hwid7.vmall.com
login3.vmall.com
*.vmall.com
api3.vmall.com
hwid7.vmall.com
up7.vmall.com
cn.club.vmall.com
*.tp.vmall.com
avatar.id.huawei.com
appstore.huawei.com
vfs-eu.hicloud.com
api-drcn.music.dbankcloud.cn
*.vmall.com
phstoqabiforeu.vmall.com
*.test.vmall.com
*.vmall.com
nfcws.hicloud.com
cn.ui.vmall.com
*.test.vmall.com
api3.vmall.com
account.cloud.huawei.com

Certificate

The complete raw certificate details for resourcephs.vmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyr9emOhDRh0zWuwUCbv
giuZxxdlpWmT3zeZe8C4iG3vjZG6L4KphZmDam6B7RjMsJPO77NNEK0po+FltFFl
mCa12tQmJ2i0sArjiha/8TounrKRNOzzdB0mklBz/7rX6Dk7hNI8MHEP/mGCARB3
Cy+gSHvFW5OHB5HNeed15xCDmwem2qYI593iyauJXDYkHrUvQLoJ5PJZqpcJRYxg
Cwc6qXlVDPf3a6JuVrEWzKl65O2xH9XwKsiv2NwFuEI3DNMHEjQvqywB2bUBoDYC
rVtJ2hLMJAfCCI9cBrdChVbG/BSxHh3jicXK48jXZyOu7//30j4Qjovs0AcmS07x
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42644372317848798146051213991169157172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Financial Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CFCA OV OCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 02:01:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-19 02:01:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'JiangSu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nanjing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Huawei Software Technologies CO.Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Platform EUDR Dept'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'resourcephs.vmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18073276842606460196203173927980188333340527022043907028565386900064045792444453337895042764494075314680834178363675878569354983461506427492969879139052998249016411219640215821192853440176667252054068548020811623223687827738796351962463796187563814586180917760444195800215173134532836324481324653614361568595856281605066033107630314402624314473619808502048998350796534903262687811644647713312312180904168055320340207180991454273324041485503911708192591651419962487945482546258280553869411331298017336107617507960051893858424927942758158488332078622197121473680515082228217301862584491630101142226317338948662027284811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cfca.com.cn/ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtc.cfca.com.cn/ovoca/ovoca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcephs.vmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcephs.dbankcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcephs.dbankcloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1dbd2c0c7cb626d54aab6b4eee300f6977963c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3effb549587e9aca59656aee67ded3ad043d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.cfca.com.cn/us/us-12.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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