*.open.10086.cn

- China Mobile Information Technology Co.,Ltd. -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 40:15:dd:67:a2:4e:e4:47:25:1b:e1:0d:c6:15:c9:a9 was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

China Mobile Information Technology Co.,Ltd.

Organization: China Mobile Information Technology Co.,Ltd.
Organization unit: Department of Business Support System
State / Province: Beijing
Locality: Beijing
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 40:15:dd:67:a2:4e:e4:47:25:1b:e1:0d:c6:15:c9:a9
Serial Number (int): 85184120587518939051372000732993931689
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4f:19:8a:db:50:71:04:36:a2:a1:a9:24:9d:be:56:72:bc:3f:19:d1
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): 1a:57:41:b4:55:85:37:a5:cd:03:55:c7:e0:b2:36:97:44:7f:0e:ac
Fingerprint (sha256): 0e:c6:df:00:a4:c1:bf:08:a9:b6:31:68:c0:51:f5:45:7e:a9:c3:ba:90:d9:14:c3:b8:ed:43:c2:79:ba:6b:ee

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.open.10086.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.open.10086.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.open.10086.cn
open.10086.cn

Other certificates including the domain name 10086.cn

(limited to 100 certificates)
img1.shop.10086.cn
www.jl.10086.cn
*.zj.10086.cn
*.ecloud.10086.cn
uc.ipower.10086.cn
open.jf.10086.cn
img02.js.10086.cn
att2.edu.hl.10086.cn
p.10086.cn
www.sx.10086.cn
mas.ecloud.10086.cn
h5.bj.10086.cn
www.cq.10086.cn
hdh.10086.cn
www.edu.hl.10086.cn
wap.sc.10086.cn
znjs.hn.10086.cn
*.mail.10086.cn
caiyun.feixin.10086.cn
www.hn.10086.cn
mas.ecloud.10086.cn
b2bjoy.10086.cn
*.open.10086.cn
*.health.10086.cn
www.ha.10086.cn
*.jf.10086.cn
wap.he.10086.cn
*.open.10086.cn
img02.js.10086.cn
img02.js.10086.cn
weixin.he.10086.cn
wap.gd.10086.cn
cmii.10086.cn
img0.shop.10086.cn
wap.xj.10086.cn
m.jf.10086.cn
service.cq.10086.cn
*.edu.10086.cn
*.ac.10086.cn
www.edu.hl.10086.cn
www.sd.10086.cn
hdh.10086.cn
*.f.10086.cn
*.ecloud.10086.cn
open.jf.10086.cn
xnq.r.10086.cn
service.hb.10086.cn
www.hb.10086.cn
p.10086.cn
www.hc.10086.cn
rd.go.10086.cn
service.cq.10086.cn
iot.10086.cn
www.ln.10086.cn
www.sd.10086.cn
wap.hi.10086.cn
r.10086.cn
open.home.10086.cn
class.edu.hl.10086.cn
openapi.gd.10086.cn
push.it.10086.cn
*.clientaccess.10086.cn
*.ac.10086.cn
dev.10086.cn
www.he.10086.cn
wapmail.10086.cn
hbq.r.10086.cn
wap.gs.10086.cn
*.open.10086.cn
www.gx.10086.cn
service.cq.10086.cn
*.ac.10086.cn
wap.sc.10086.cn
wap.js.10086.cn
service.cq.10086.cn
b2bjoy.10086.cn
zhengqi.10086.cn
www.ha.10086.cn
p.10086.cn
www.he.10086.cn
poolaos.ecloud.10086.cn
auth.weibo.10086.cn
www.gx.10086.cn
open.iot.10086.cn
wap.sc.10086.cn
wap.sx.10086.cn
service.ha.10086.cn
*.clientaccess.10086.cn
www.gz.10086.cn
b2b.10086.cn
wap.jx.10086.cn
service.cq.10086.cn
m.sd.10086.cn
www.sh.10086.cn
es.b2b.10086.cn
zhengqi.10086.cn
wap.sc.10086.cn
logdownload.cmcdn.cdn.10086.cn
oa.rcs.10086.cn
crm.sd.10086.cn

Certificate

The complete raw certificate details for *.open.10086.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplIoV7I5P0SczTmWOMz7
Pu5UaVPM43wrkokGV7trQ4oiFk6KMTCtrxQyTBXJW3v2M4aR6AbeDNdUkXbceoB8
hb/Gt0uYI1o5hhCJGc02hWZ6bhbbrigP2j5Pouga0vSrvFetb5hQVc3n1LfBTAXC
S54d7aY2962rg4qSyIrUCyVuWFVXmNUjbpht2Cd1k73/YHYSHqJneJPsaBH5BvXE
nIjw5+H/Yd1WAevzZShmUq23R7tUnVgk96xZo5k4DBlViQgLpa1nYiqeok9Hzy6w
W909QhSNycVnWFnilLlXh4MkAfUKxOVxg4Fr8SIl/PpVFmKkqroeCX5rqU2vWeIk
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85184120587518939051372000732993931689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 08:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Mobile Information Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Department of Business Support System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.open.10086.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20996072041032101242356502996870938152784677993663951063816037991786827699908983426303255018091425770860261608843959908451848914690098633297937795772861149262185540356333396629485400308485171532976266183508189248705222200304151935577420253440801506934103784697335739422564900032638841523837215112971686761131999468009996528481495611279898859584374141157053722968760772244001040059771932069455799609808597768764641871636002785367289303446712963787810776187427368034968274067952305058350063808529361443613931085336411294117294617601001740917372417519531834009170022016120012307133016344244333075422686807697989889565949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f198adb50710436a2a1a9249dbe5672bc3f19d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.open.10086.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.10086.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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