cdn.c3edge.net

- ChinaCache North America -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:ab:ae was issued on by GeoTrust, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ChinaCache North America

Company registration number: GSa76X-cUtE9wHJSBgLaxFpUhCWjKful
Organization: ChinaCache North America
State / Province: California
Locality: Diamond Bar
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ab:ae
Serial Number (int): 109486
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 4f:bf:eb:64:e6:86:d4:bd:55:58:e4:bb:23:c5:c7:45:ce:70:97:e1
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 8a:27:2b:3d:f4:0c:a6:7b:2e:3d:81:da:65:57:be:9a:9d:e8:6c:4a
Fingerprint (sha256): 1f:8b:ca:66:3b:30:a8:0d:94:db:5f:13:1c:97:76:2e:2c:41:6f:b7:e0:0c:ee:9e:81:b4:c8:84:b9:b0:1c:53

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate cdn.c3edge.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.c3edge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tradercc.iforex.com
traderstaticcc.iforex.com
player.ooyala.com
content.roomorama.cn
www.sothebys.com
www.extrabux.com
static.extrabux.com
cdn.luxup.cn
cdn-cn-media.luxup.cn
rovio-stage.c3edge.net
tsg.fxcorporate.com
tsgx.fxcorporate.com
tsweb.fxcorporate.com
cdn.ssl.c3edge.net
cdn.c3edge.net

Other certificates including the domain name c3edge.net

(limited to 100 certificates)
cdn03.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
munin.orca.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net

Certificate

The complete raw certificate details for cdn.c3edge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FmyK/N/Q/TCGwo6x0AG
X76wi0+qy64QWLeLndVBuWwD46ztzDe4rKadUdRNZTQHlrlCCGYBRVlP8+SO9iVa
rMlhr3qcF3GXCS2l6ahFWKsYUknFL+28md6il/jjsjViCirsFO/E8hc9pbFNnUMF
vae4IXAyCY3mkSac5zlgSGnwC6HTCNu3s3uuvH2pXJG6DGpE1zh3jtsSi6J0dtru
RK+qgJT9SVStI08ZeFhEOhANzGaPBHbKmDR9Wdyt1Q6XqgH2pug4IbiPeuDUfbs6
K6lgA1VKhWxe3g8yhvF6XxUTxZWUg79PcUTLWUAOCPqirc31CsO/jmiLJ7dV7SyF
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-10 19:05:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-02 01:08:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GSa76X-cUtE9wHJSBgLaxFpUhCWjKful'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diamond Bar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ChinaCache North America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.c3edge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26301798170729434936853760145915487304339925740956681277823672443793113822700993705954843845224490002893076889397358946026548109207777730863925386277636293988455125273015131340530987058289511253155886881363425770511348318832812019463730764126783162210468287843787279256129154615665456545171134683883747068235809729063825803150268563557350600496613437416372386089402567982169495333231960820808357705563036011924445094271030324174294750054760285141571569451494212926322693110061248014426658676768454622513204810064838793089045033102043888245249394406172326135084551780155304431868523409604334769778516665848031037130239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradercc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traderstaticcc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.ooyala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.roomorama.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sothebys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extrabux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.extrabux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.luxup.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-cn-media.luxup.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovio-stage.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsgx.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsweb.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ssl.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.c3edge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fbfeb64e686d4bd5558e4bb23c5c745ce7097e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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