uni-trend.com

- 优利德科技(中国)股份有限公司 -

Issued by GeoTrust RSA CN CA G3

About this certificate

This digital certificate with serial number 0f:f3:0d:d0:0d:56:f2:dd:d4:9f:ea:92:0a:48:4c:df was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

优利德科技(中国)股份有限公司

Organization: 优利德科技(中国)股份有限公司
State / Province: 广东省
Locality: 东莞市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:f3:0d:d0:0d:56:f2:dd:d4:9f:ea:92:0a:48:4c:df
Serial Number (int): 21200428228308771298892608400309898463
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 72:0d:e3:12:04:0e:d4:05:00:86:f4:86:b9:11:2e:55:14:ca:46:d0
AuthorityKeyId: 47:14:26:5c:cc:8d:27:8a:29:41:6c:43:30:95:1b:45:2f:c4:75:c8

Fingerprint (sha1): c9:1e:da:88:c6:de:13:dc:69:c7:b4:3f:a3:f0:32:bf:65:00:8b:24
Fingerprint (sha256): 08:c7:bf:a9:38:5f:c0:31:4a:64:13:39:8e:c1:c7:8d:77:c6:f3:44:b2:63:37:0c:69:9d:e3:50:eb:f8:42:6d

Issuing Certificate URL: http://cacerts.digicert.cn/GeoTrustRSACNCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/GeoTrustRSACNCAG3.crl

Check the revocation status for certificate uni-trend.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uni-trend.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uni-trend.com
www.uni-trend.com
uni-trend.com.cn
www.uni-trend.com.cn
meters.uni-trend.com.cn
www.meters.uni-trend.com.cn
instruments.uni-trend.com.cn
www.instruments.uni-trend.com.cn
oa.uni-trend.com
www.oa.uni-trend.com
crm.uni-trend.com.cn
www.crm.uni-trend.com.cn
meters.uni-trend.com
www.meters.uni-trend.com
thermal.uni-trend.com
www.thermal.uni-trend.com
instruments.uni-trend.com
www.instruments.uni-trend.com

Other certificates including the domain name uni-trend.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for uni-trend.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9lFgVLn2Nz4+D3RqBag
UDxKi4dPLQfubEtWlqD6RU8+kOU0l7sfeMZwgMfMMBN26KlgOjHw5rTWQybGOb+3
BEUwfu78I8PSu+PCixjNE0mon5Jrr3XVVlplFwWGnectrPbLiqQo+rgd056GWF4Z
3NySSJ1qlwTUvgM4vLoRV7mH88+TCWaut5UG8+fmhn49YatbeIJsBxisOQ3GBPVt
L/z1hLqNGuCAOEPmwCcWf0OpH6l4K62hfis6Kf0EovXyOEOTmZC/wHvyZi9jOd6F
9lWGHTHM+TuGNow8kD415WQl3+5Vlmu+aPsjZ2tvrlVclARMFFCm0Xo8ACLR4CIp
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21200428228308771298892608400309898463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CN CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '广东省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '东莞市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '优利德科技(中国)股份有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uni-trend.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26238469700064047180489973655159738223560096883943346188753005560221403617901082827931852846080329661494450790547715643145896789265739348592029600042363114708868626927260348719847443740351801081077936896259785711425085915350225121681215674294032117209581892227544663551521711661959021969572199056207011390324348244482436566512025552166326086772424190348965462048061094410694975817339711781470489581707333254729652885500610022591911718272918945568782236128411437418821751270415850557811774083068542990235184648899248573027394507586253810934835027014737974611514883232489297743472067996450941632965632712659498269026683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4714265ccc8d278a29416c4330951b452fc475c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							720de312040ed4050086f486b9112e5514ca46d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meters.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meters.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instruments.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instruments.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oa.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crm.uni-trend.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meters.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meters.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thermal.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thermal.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instruments.uni-trend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instruments.uni-trend.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/GeoTrustRSACNCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/GeoTrustRSACNCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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