ws.cupdapp.net

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 0c:40:ba:04:7d:45:00:13:ca:f9:52:18:3b:ea:f2:f3 was issued on by TrustAsia Technologies, Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: 上海市
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:40:ba:04:7d:45:00:13:ca:f9:52:18:3b:ea:f2:f3
Serial Number (int): 16286815832233191185163332984383402739
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9b:aa:47:f9:ce:cf:97:40:6a:97:6d:46:27:2f:a8:91:e3:49:6f:db
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): 2a:c4:1c:80:4e:1a:f6:15:3e:3f:f3:76:d7:a8:84:2b:d6:f1:23:3a
Fingerprint (sha256): 0d:3a:01:11:aa:10:0c:bb:18:16:f9:3a:e8:ed:99:45:70:47:bf:5d:b8:06:e0:4b:9c:89:66:a0:38:9f:8b:e8

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate ws.cupdapp.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.cupdapp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.cupdapp.net
youcard.bankcz.com
ccapply.fjnx.com.cn
ws1.qzccbank.com
coas.jshbank.com
fbc.qlbchina.com
fraud.cupdapp.com
iws.ccabchina.com
ccoa.gsrcu.com
groupdeal.ynrcc.com
netapply.ynrcc.com
datacard.mintaibank.com
ysrlk.boubank.com
ccmms.grcbank.com
youcard.bankofrizhao.com.cn
xykapply.xrcbank.com.cn
apply.creditcard.xjrccb.com.cn
credit.zjrcbank.com
wscreditcard.jinzhoubank.com
xykapply.hnlyrcb.com
cupdapply.hkbea.com.cn
online.cbhb.com.cn
creditcardsq.trcbank.com.cn
wjws.bankofnx.com.cn
xykws.lj-bank.net
trip.cqcbank.com
ws.96262.com
yscredit.jybank.com.cn
ws.boimc.com
gwkws.xzbc.com.cn

Other certificates including the domain name cupdapp.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for ws.cupdapp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtxXCq4O/K4Ai2u8MIl+
Ut9z/0awILp1HVxMJFy0WPIHtFVrRiEV1PlYfOpt2kweHuFx5L22gLWTYdzqBJLe
taoU7x5T5TWMrPV4fp7QdkXAvF5N8GelrxEbph7bVDgxZnj1xbQ50dBuSdYKa40Z
b/D5WvBUh5aib1PAtMTpkpdrbbCwWMofxwVS87WZcUBIbtjBbUPbgJxt2mT8uu2X
bEN9HDtki1BoFGjYFapCv7xFzRy6NreeNekE5UHk6Ahji9T+hrDMRpbV8ulOcny/
SW5lhbbrRiq5y5ASAobfHUblrIXnMVciO9x6Ex+yooPeGbdsD7hPUCcWQvRScCYp
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16286815832233191185163332984383402739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.cupdapp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21569165551119056098812878878980987301327604303728245453477590224285868357305896085178479468025117007698812507597252893282665756289173039345004216393192081578000099147832338001171102171552437891886254672294551073805278773974407483844969185209952289484621104265450656381278899498104318788655382381521027581645808165285554521331562186441214989581100368893905444937709898658015500519968971060994101310208250318780825814433046875735029317176841264169305170145902516268526186327360488485705564212590833292237318238519977949873504855684596138835098533970987907411889278774152850017806114004428987698827329289601001948850477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9baa47f9cecf97406a976d46272fa891e3496fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (635 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cupdapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapply.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws1.qzccbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coas.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbc.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iws.ccabchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccoa.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdeal.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapply.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacard.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysrlk.boubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmms.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.xrcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.creditcard.xjrccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit.zjrcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscreditcard.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.hnlyrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupdapply.hkbea.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cbhb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardsq.trcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjws.bankofnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykws.lj-bank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip.cqcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.96262.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yscredit.jybank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.boimc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwkws.xzbc.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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