*.zhengzhou5-website.zos.ctyun.cn

Issued by SHECA DV Server CA G5

About this certificate

This digital certificate with serial number 57:de:30:da:17:60:41:7f:be:0d:55:e8:8c:18:92:26 was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.zhengzhou5-website.zos.ctyun.cn

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 57:de:30:da:17:60:41:7f:be:0d:55:e8:8c:18:92:26
Serial Number (int): 116796516370517337480797450658788184614
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: db:ee:14:99:ce:b1:55:98:eb:bb:8d:ca:7c:46:b7:2e:61:05:3f:06
AuthorityKeyId: d8:e7:06:1b:64:5f:ab:30:08:88:7a:24:53:aa:e1:1c:83:04:bf:6d

Fingerprint (sha1): 08:44:0e:24:44:72:eb:91:d4:f9:f4:28:38:0b:f3:8f:21:57:02:de
Fingerprint (sha256): 38:36:59:75:a6:d0:7b:d8:de:4a:86:90:03:29:f6:02:5d:3b:b7:cb:0b:27:4c:8a:f4:98:14:08:12:64:20:91

Issuing Certificate URL: http://certs.global.sheca.com/dvscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/dvscag5
CRL Distribution Point: http://crl.global.sheca.com/dvscag5.crl

Check the revocation status for certificate *.zhengzhou5-website.zos.ctyun.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zhengzhou5-website.zos.ctyun.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zhengzhou5-website.zos.ctyun.cn
zhengzhou5-website.zos.ctyun.cn

Other certificates including the domain name ctyun.cn

(limited to 100 certificates)
*.tjoss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.nm2oss.xstore.ctyun.cn
*.cqoss.xstore.ctyun.cn
*.hangzhou7.zos.ctyun.cn
*.hubei-41-website.zos.ctyun.cn
*.js2oss.xstore.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.ctyun.cn
*.ahoss.xstore.ctyun.cn
*.yichang2.website.zos.ctyun.cn
*.shandong-20.zos.ctyun.cn
*.snoss.xstore.ctyun.cn
*.ctyun.cn
*.wulumuqi27.zos.ctyun.cn
*.xinan2-website.zos.ctyun.cn
*.shanghai-7.zos.ctyun.cn
*.liveplay.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hn6oss.xstore.ctyun.cn
*.hainan-2.zos.ctyun.cn
*.jiujiang-2.zos.ctyun.cn
*.huaihua1.zos.ctyun.cn
*.guangxi-5.zos.ctyun.cn
*.vaas.ctyun.cn
*.zhejiang-4.zos.ctyun.cn
*.ctapi.ctyun.cn
*.hn4oss.xstore.ctyun.cn
*.hb5oss.xstore.ctyun.cn
*.xinan2.zos.ctyun.cn
ctyun.cn
*.xinan1-website.zos.ctyun.cn
*.obs.ctyun.cn
*.hubei-41.zos.ctyun.cn
*.xzoss.xstore.ctyun.cn
*.yunnan-2.zos.ctyun.cn
*.sn2oss.xstore.ctyun.cn
*.changzhou3.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.ynoss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.gx3oss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
*.gzoss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.hn5oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
ctyun.cn
*.jiangsu-10.zos.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.shenyang8-website.zos.ctyun.cn
*.ctyun.cn
*.changsha42-website.zos.ctyun.cn
*.zhanjiang2.website.zos.ctyun.cn
*.jx2oss.xstore.ctyun.cn
*.guangdong-3.zos.ctyun.cn
*.snxaoss.xstore.ctyun.cn
*.sichuan-2.zos.ctyun.cn
*.huabei-2-website.zos.ctyun.cn
*.huaihua1.website.zos.ctyun.cn
*.nantong2-website.zos.ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.cq2oss.xstore.ctyun.cn
*.sxoss.xstore.ctyun.cn
*.beijing9.zos.ctyun.cn
*.zhongwei16.zos.ctyun.cn
*.ah3oss.xstore.ctyun.cn
*.zhengzhou5-website.zos.ctyun.cn
*.zj3oss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.suzhou3.zos.ctyun.cn
*.guangxi-5-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.shoss.xstore.ctyun.cn
*.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.taiyuan4-website.zos.ctyun.cn
*.hloss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.hioss.xstore.ctyun.cn
*.liaoning-5.zos.ctyun.cn
*.wulumuqi27-website.zos.ctyun.cn
*.shandong-20-website.zos.ctyun.cn
*.hubei-4.zos.ctyun.cn
*.yunnan-2.zos.ctyun.cn
naas.huaweicloud.com
*.xiangyang2.zos.ctyun.cn
*.hunan-4.zos.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.gz4oss.xstore.ctyun.cn
*.nm4oss.xstore.ctyun.cn
*.hboss.xstore.ctyun.cn
*.cn-nmhh1.ctyun.cn

Certificate

The complete raw certificate details for *.zhengzhou5-website.zos.ctyun.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvzcbdBMhGwPkVZI6Goy
m+1CT/Vx/iQx8MRQRqkunl0U4xLZKZTZ416s0TpDFUpr6ImUDaCLb9CUHrTEen0S
vAEu45FJL/SSMEQFp1uItgUrp6oZ6gghKCfTPtffIDvZf7ZGiFZWreujvHOeNLpp
AIfJhQ7WStdaK9eDDmzkIhPMsHDtxx+QUj0F9uXqhmw7fddWC0rGShrHyETXtc62
GAR+JIxEon9blt1Y+7Okg3TQXHTz2gTq7sfezf9VbBpFny3FxswduG7Oz2tfvRLB
igFQkylgn63h+iRio71vPfuEQVWWJ984YeEcxBWn06vDAlVy+9Io/ltR+HSHgI+7
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116796516370517337480797450658788184614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA DV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 09:40:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zhengzhou5-website.zos.ctyun.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24109968374889648692099109917331567989876881162431263159917500770977279554356712655363307112588258912306266438771191398925034445949231570983838053239502306844901128144378407965843235399660145333800112313222929483523302619354501043458692075957022358290886034799666625823682986821088563759678191369601479843478235470820893369124188378286323599951337357483647224143196891660312399639287207941104764288380780850946101495791990182565474472368289680266304588655936453050520011173283412500055903636747735106990645243029166827464590528649567165692067860162302541864074893091654354161962060510719350703897242800018928895507403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bdca774de0000040300473045022100e11c7bb6f23d8b9eb61ac452867818d0e80ff72dbd4fa5500ce0f834a03d60c30220674a48157d37af9644caf64641f9b7975d93f219e6ea1fa1b87a82a8c53edd0e007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bdca7775d00000403004630440220729f454d16f3a7d51e2629c064289592a233c997fd38f33bad5c1d40592712d802207481cfa9913203d268f0013e1f61e7366de65ead4e9580f1c77bd86a3488074500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bdca77a4a00000403004630440220647d83b7ebb7143ab77d3f4df3feeb2f63c4ff0e11e10890705f157a25c4846102202b65135df822c9e66a0e60d2ba138fa4fbec138f0659ab9fa604a1b8fe9e99a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/dvscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/dvscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8e7061b645fab3008887a2453aae11c8304bf6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhengzhou5-website.zos.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhengzhou5-website.zos.ctyun.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbee1499ceb15598ebbb8dca7c46b72e61053f06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/dvscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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