kateeva.cn

- 科迪华显示技术（绍兴）有限公司 -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 09:65:49:b7:c2:9c:85:13:bb:41:24:a1:88:64:d5:6e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

科迪华显示技术（绍兴）有限公司

Organization: 科迪华显示技术（绍兴）有限公司
State / Province: Zhejiang
Locality: Shaoxing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:65:49:b7:c2:9c:85:13:bb:41:24:a1:88:64:d5:6e
Serial Number (int): 12488969119660379900854862221593073006
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:53:7e:db:ba:c0:90:d3:a3:88:79:1a:11:15:aa:73:a8:1e:a8:c2
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): 39:77:0f:10:58:42:03:f0:6d:a0:d6:f6:da:ac:36:6a:a6:57:6d:44
Fingerprint (sha256): 23:b4:23:85:cd:d0:37:11:dd:97:f7:31:80:f2:ab:75:0a:a6:26:6e:b2:00:66:ed:35:2f:10:2a:23:6c:20:da

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate kateeva.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kateeva.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kateeva.cn
www.kateeva.cn

Other certificates including the domain name kateeva.cn

(limited to 100 certificates)
*.kateeva.cn
kateeva.cn
kateeva.cn

Certificate

The complete raw certificate details for kateeva.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdyyJ7qpeNDRiz3jkXUL
/Y+PSslQKEAPG1K1msm7mewwVg7/IuZl/hiKUcQRuFMhpKlrCVju9wvY+RvxRyF5
OggnBm+ul1TNo6vJBVlpHmAg8YYbBbJ9HebdyPfCR+Tap5onwAEjM4tfG+lk8vTf
6omx6jZ5Tvw7mlzASm133FxKZZHZfFgxIPvISjRBIFIf6wlueXh9lys4kgUHgEKR
HREp84Ot8Vd7N3QHm329DFmMk6duzBwJQSekJldBm/Jgr8AkpMTnYFXLwPeQUMrH
hOuhLH1HXTuLBwvBTJ/Hs8tf8lGN5r1zSiSPmMjL4RrPVh1P7LO6NNqh8FT/MsVJ
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12488969119660379900854862221593073006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zhejiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shaoxing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '科迪华显示技术（绍兴）有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kateeva.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21948055972768669715181854845085992819625394618372922712839407040622107700616655921460791372164892887718379443636715085221828659760628662962488214427400985718028998090176842906670815594459703056227089476933473248464329289389414410284261797433441478335317590757217059554404039413668507530364479176247134360199240258450250726762172728535291995113198938172737752320489841513992184570280506754680264846745904402148981829690913373448384214482296397732179433083132048469455759663521965386506964005748205785508737226387071134129241069826667408006872381288629398257093932759888912580420748844473274930941415493627343345633589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3537edbbac090d3a388791a1115aa73a81ea8c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kateeva.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kateeva.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a5ed60fa29374d3ad09ea3b4fd8e4691822c68bf9da95342a6806fcaac6e3b9175d65a4a1552aba08cb0bbb7f0e01b64c8dc44faac635f78aa6c24d63836be9cf81d036fa567acd7197b51a5e02aa643ec4ac7c801297d964114c586a5b030bc669acebe9f7f463e19dc46e61c64f19e194af0138f75394468dd8d1ff01616259663ff8a160c68e1c0c5de32db4a0909154320eac1c1fe01e577cbfecd858c77e1251ffc7ec6213a82a7c6093e871c1fc8f3af67ada82a6afa38c33a0187c2e26a3bbcb5f990b4cfc32e10ac883f4419f782711afb0f8ccc2c4efed276f6039563d73ed65cf9d6de950454e88dd1dbaf9f57183aaaf7776d8e37ecca0dc3e0b