hiai.op.hicloud.com

- Huawei Software Technologies CO.Ltd -

Issued by CFCA OV OCA

About this certificate

This digital certificate with serial number 20:15:01:e5:d2:8c:cc:e2:8e:52:5d:64:57:5b:ce:a2 was issued on by China Financial Certification Authority.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Huawei Software Technologies CO.Ltd

Organization: Huawei Software Technologies CO.Ltd
Organization unit: Cloud Platform CNDR Dept
State / Province: JiangSu
Locality: nanjing
Country: CN

China Financial Certification Authority

Organization: China Financial Certification Authority
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 20:15:01:e5:d2:8c:cc:e2:8e:52:5d:64:57:5b:ce:a2
Serial Number (int): 42644372589967427950535239790365494946
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 62:a5:c6:37:85:80:ae:a3:c2:b3:c6:a2:58:38:8d:68:14:9f:01:07
AuthorityKeyId: 66:b3:ef:fb:54:95:87:e9:ac:a5:96:56:ae:e6:7d:ed:3a:d0:43:d1

Fingerprint (sha1): 4d:0e:90:e8:48:d1:d6:69:96:67:00:bb:fb:78:06:f9:e5:ee:1a:0f
Fingerprint (sha256): 1f:bb:87:df:55:b7:77:40:3d:f6:19:38:01:0e:ee:18:8c:30:49:04:7c:22:17:ca:6a:05:8c:4a:d5:76:a7:72

Issuing Certificate URL: http://gtc.cfca.com.cn/ovoca/ovoca.cer

Revocation information

OCSP Server: http://ocsp.cfca.com.cn/ocsp
CRL Distribution Point: http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl

Check the revocation status for certificate hiai.op.hicloud.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hiai.op.hicloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hiai.op.hicloud.com
*.op.hicloud.com
*.op.dbankcloud.com
*.op.dbankcloud.cn

Other certificates including the domain name hicloud.com

(limited to 100 certificates)
update.hicloud.com
*.op.hicloud.com
cinemalive-tx.hicloud.com
*.hicloud.com
*.iap.hicloud.com
cinema-eu.hicloud.com
dnkeeper.hicloud.com
eumsgcn02.hicloud.com
*.hispace.hicloud.com
appdlssl.hicloud.com
www.cloud.dbankcloud.com
billsvc7.hicloud.com
europefoldercms.hicloud.com
nsp.hicloud.com
appdlssl.hicloud.com
upfile7.hicloud.com
ai-rcm-dre.dt.hicloud.com
upfile7.hicloud.com
e2u.hicloud.com
update.hicloud.com
iap.cloud.huawei.com
*.nsp.hicloud.com
appfile-drcn.op.hicloud.com
*.cloud.hicloud.com
wo2.hicloud.com
*.game.hicloud.com
nearby-drru.platform.dbankcloud.ru
appdlssl.hicloud.com
nfcws7.hicloud.com
update.hicloud.com
mosplay-drcn.himovie.hicloud.com
iap.hicloud.com
cloud.hicloud.com
cloud.hicloud.com
hisync-eu.hicloud.com
*.hicloud.com
homevision-drcn.things.hicloud.com
*.hispace.hicloud.com
static.hicloud.com
edugw-drcn.hispace.dbankcloud.cn
hisync7.hicloud.com
hivoicedevtrs-drcn.emui.hicloud.com
appdlssl.hicloud.com
hiai.op.hicloud.com
dcc7.hicloud.com
*.game.hicloud.com
jos.hicloud.com
grs.hicloud.com
hicloud.com
nsp1.hicloud.com
*.wallet.hicloud.com
iap.cloud.huawei.com
*.hispace.hicloud.com
update.hicloud.com
*.nsp1.hicloud.com
ocean-otc.hicloud.com
developer-dre.op.hicloud.com
appgallery.cloud.huawei.com
hitouch.hicloud.com
cloud.huawei.com
jos.hicloud.com
metrics1.data.hicloud.com
setting.hicloud.com
appstore.huawei.com
*.iap.hicloud.com
*.appfile7.hicloud.com
upfile7.hicloud.com
omp7.hicloud.com
smarthome-dra.things.hicloud.com
grs.hicloud.com
www.hicloud.com
*.cloud.hicloud.com
logbak.hicloud.com
grs.hicloud.com
e2u.hicloud.com
*.himovie.hicloud.com
*.push.hicloud.com
appdlssl.hicloud.com
pushtrs.push.hicloud.com
nfcws7.hicloud.com
api.push.hicloud.com
pushtrs.push.hicloud.com
appgallery.cloud.huawei.com
sp-drcn.wallet.hicloud.com
hivoice.hicloud.com
waps1.hispace.hicloud.com
dcc7.hicloud.com
*.wallet.hicloud.com
query.hicloud.com
coupon-drcn.iap.hicloud.com
appdlssl.hicloud.com
*.op.hicloud.com
wp-drru.iap.hicloud.com
hicall-drcn.emui.hicloud.com
appstore.huawei.com
appdlssl.hicloud.com
mosplay-dra.himovie.hicloud.com
appdlssl.hicloud.com
update-query-global.platform.dbankcloud.com
*.appfile7.hicloud.com

Certificate

The complete raw certificate details for hiai.op.hicloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIf53GKBv1YMIusklLar
47XpaeGn+opSlLCuuO+ImVdE1qASF2tNHvM6bGOKJyMg+xxr2Plj8VIbOmgEfQiw
IlEAodRfTUxnK3mkxlftuf9XTrbUS3FN7TwFYtOg/fFLwRGx28vsLmm1jRPV3UeW
41B6CEG7XicHNaQDXwL4IT7ELJ1r8Tcnw1SZgIEud/BX+/0p356hgooLI2uNooCY
yZM18LW4QA+zbANrgJFUZ1YHix8T+SRqnjY78/seAJqIhkeukXTusbNALxyccYY/
HoFDUxd/Tg84JrRfSHWHUt38hSQMTmZtuj+yoFK5sXz+dHED0NDGrRgE1TA2R3yY
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42644372589967427950535239790365494946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Financial Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CFCA OV OCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 07:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-18 07:09:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'JiangSu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nanjing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Huawei Software Technologies CO.Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Platform CNDR Dept'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hiai.op.hicloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20770134288502141489849226979678247882243318598546478541923122670831622460891655627576973028832954539465101501522089925333660860768617641174549830576233548209866725187712134063479500478776291778464249211881911550817364718083521650100171215672962681758776921174039890037982505325078535128606203264613915967436719143084078666163426082287622573435545884542579761130095710389226643958734258540674507634020538562058602162837452929825710818624585363006317160502385360657021033808106623920751548294071729837553826901379626472911731935268861485173577919661317340913396591681544810306440618834490385996910512782643201423743217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.cfca.com.cn/ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtc.cfca.com.cn/ovoca/ovoca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiai.op.hicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op.hicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op.dbankcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op.dbankcloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62a5c6378580aea3c2b3c6a258388d68149f0107
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3effb549587e9aca59656aee67ded3ad043d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.cfca.com.cn/us/us-12.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.cfca.com.cn/OVOCA/RSA/crl25.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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