hotyea.com

Issued by CA 沃通免费SSL证书

About this certificate

This digital certificate with serial number 12:d7:22:fc:a3:2e:55:1a:1c:1f:9b:a3:79:e7:92:5e was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=hotyea.com,2.5.4.13=#0c35e5858de8b4b953534ce8af81e4b9a620e794b3e8afb7e7bd91e59d80efbc9a68747470733a2f2f6275792e776f7369676e2e636f6d

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 12:d7:22:fc:a3:2e:55:1a:1c:1f:9b:a3:79:e7:92:5e
Serial Number (int): 25043157366639020475184490039682241118
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 99:24:ba:fa:95:16:6a:b3:9b:fd:45:96:50:f1:9c:db:86:0b:99:0f
AuthorityKeyId: fd:c3:ae:11:d7:e5:c8:e5:d4:34:41:aa:41:0d:28:29:dc:0b:f7:3e

Fingerprint (sha1): 9f:2c:55:bb:95:60:85:9c:bf:c7:3e:c9:c8:7e:c5:e4:e9:67:c1:c1
Fingerprint (sha256): 2a:db:8d:7b:5a:78:04:d7:03:c2:d6:06:67:82:91:b6:f0:ed:3b:b7:f5:08:73:c2:8c:fd:cf:56:48:54:15:8b

Issuing Certificate URL: http://aia2.wosign.cn/ca2.server1.free.cer

Revocation information

OCSP Server: http://ocsp2.wosign.cn/ca2/server1/free
CRL Distribution Point: http://crls2.wosign.cn/ca2-server1-free.crl

Check the revocation status for certificate hotyea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hotyea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hotyea.com

Other certificates including the domain name hotyea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hotyea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf0ukdwJXGGiSE0QeGiL
CyC1wxhjEb4ff9nW3FGwiSjr2YCcc8d4teZStp7lWUDC2o5MqNdJwK2JsZXARq0N
2dBRAMLyCcaTlOLyuMBcLNdMOLuw28EB/J8mLjjFZAZs8T3f/I0Qn15lQ93usqX1
V6smv/lkdQp7QLOw5nZfD7M4nvjvzx73O1BD6KeHC7W5d9AyLwGXvCwb7vRXbtKH
UJxVT4v5vv+fkZ+UVZMdKNk7z515h2ohJnvU6oWLduqeshUKfM8N337ZdOLaR3yh
rA47pMh6lfOC/E7GUHHoaADyywZMwhD6DlbBHBC7KfQ9QqvPDEKvk4z4o1QHD17C
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25043157366639020475184490039682241118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA 沃通免费SSL证书'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-20 14:34:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-20 14:34:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '免费SSL证书 申请网址:https://buy.wosign.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hotyea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26003701172584239966071580659415344192812328807269949824678344303854443757242455331508399560446808937607841124047592829116729725836505730020691083556347197196028058079356034480363411408686522798703763891469376141208601025637297794760136751219878298641136863517093122136299030753099901208092446225145802496947159797693666785226063800332808334040461131696365754909307331907747720278131855073074628634325959356818606660202816279102541263648755164714293673762838984717297328115416669990413796213170349416199195077343557450385967516797849662565977692003281070293300757738828634727965602530015210179944278755306895853929137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9924bafa95166ab39bfd459650f19cdb860b990f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdc3ae11d7e5c8e5d43441aa410d2829dc0bf73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.wosign.cn/ca2/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia2.wosign.cn/ca2.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls2.wosign.cn/ca2-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotyea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.3.1.2.7.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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