www.chinacache.com

- Beijing Blue-IT Technology Co.,Ltd. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:92:e0 was issued on by GeoTrust, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Beijing Blue-IT Technology Co.,Ltd.

Company registration number: 0BsEgsA7kNV5UB2B/ghjfMDm2gCpBXt7
Organization: Beijing Blue-IT Technology Co.,Ltd.
Organization unit: MIS
State / Province: beijing
Locality: beijing
Country: CN

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:92:e0
Serial Number (int): 168672
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 2f:7b:1d:fc:68:5b:82:3c:7c:a8:9a:50:5d:aa:99:16:09:c9:72:7c
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 94:a1:42:a8:85:37:64:6c:75:26:ea:90:82:a8:0d:c3:7d:67:7d:34
Fingerprint (sha256): 18:c7:55:33:91:9e:dd:97:6b:68:69:0b:e6:b4:b9:fb:57:d6:f5:97:89:98:6a:d0:5b:66:15:ca:84:d7:98:1d

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.chinacache.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chinacache.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cc-ex13-cas03.chinacache.local
corp.chinacache.com
autodiscover.chinacache.com
legacy.chinacache.com
cc-ex13-cas01.chinacache.local
cc-ex13-cas02.chinacache.local
www.chinacache.com
chinacache.com

Other certificates including the domain name chinacache.com

(limited to 100 certificates)
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
report.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
log301.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
test2.edu.chinacache.com
www.chinacache.com
ccms.chinacache.com
cdn04.ccedge.net
*.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
yun.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
storage-1.chinacache.com
www.chinacache.com
*.cosapi-wz.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
en.chinacache.com
www.chinacache.com
yun.chinacache.com
*.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
s.portal.chinacache.com
*.cosapi-bj.chinacache.com
www.chinacache.com
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
www.chinacache.com
ap4-1.cdn.salesforce-communities.com
www.chinacache.com
www.chinacache.com
*.chinacache.com
www.chinacache.com

Certificate

The complete raw certificate details for www.chinacache.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8mVFD/ZI+2HRoulXvGD
uKv+LK1auSo0imrQox7xzyOm7hwPXp6vKW3pkCbieA5BUl5kOdIXJG/jUMWLSnhE
KK9dLAsZI6mNt8JPP+VLtlBhCzM3DCvwGl5sfryAlrYf/TThrMhDSK+9pDPW8j1r
p0JskqckVhgHAANY4nfaK8VggB1VV3EQngBStmLvpALvd02WPe+NlApqsRJDqzbn
RDrhaA6t6IvoRy7rYCZfP1HjRjCH8sRvMeyDEXVaucGk6a3KkSA7I2KdlOB9QOpm
hX3q5+YL7V9nZ4RKPVEYZ6O2bz5oB+7e7rTLyE/I0k634IO1cx2i80/KYgZdp7Pq
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-14 19:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-17 01:41:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0BsEgsA7kNV5UB2B/ghjfMDm2gCpBXt7'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing Blue-IT Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chinacache.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19666341226543411252961533237279610654705776970292824289526230668560709467564470382417607260863683843536597560101042486582514487873433425258948821081911389719289242672076802987596962402626582659968018253959981535155865684761815276589129737391692548488735557681263903602521338990412213656007965646679662287125033050084009498267656475973260183504522857177088499299794288301592313113598073784185829403430858700386911994391848836421826270048477119515920197545900086025702769741722430464232545238542593967136828400790004014403165691873542909483655055952481135513772110487901993612540048727442330179649485162824327620717063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-ex13-cas03.chinacache.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-ex13-cas01.chinacache.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-ex13-cas02.chinacache.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinacache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinacache.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f7b1dfc685b823c7ca89a505daa991609c9727c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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