www.ciac.sh.cn

- Ciac -

Issued by SHECA G2-1

About this certificate

This digital certificate with serial number 5f:90:d7:c1:15:01:df:ed:8e:44:d8:5f:51:8a:45:d3 was issued on by UniTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Ciac

Organization: Ciac
Organization unit: Ciac
State / Province: 上海
Locality: 上海
Country: CN

UniTrust

Organization: UniTrust
State / Province: Shanghai
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:90:d7:c1:15:01:df:ed:8e:44:d8:5f:51:8a:45:d3
Serial Number (int): 127028726362797625068451809439194432979
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2e:1c:a8:52:42:a8:cc:16:44:1a:83:e0:2f:30:ef:42:8e:93:25:ff
AuthorityKeyId: f1:07:65:e3:89:e2:dd:f2:cd:ef:4f:67:eb:73:2d:55:c1:33:38:dd

Fingerprint (sha1): d9:5a:69:b7:bf:35:cf:c9:9d:a1:48:13:0d:6f:2a:a2:8e:5e:a4:6e
Fingerprint (sha256): 42:49:20:68:4e:e1:5b:7d:3b:ee:b5:71:0e:e0:84:7a:bf:5e:67:c7:19:b9:56:09:23:94:9b:d8:74:50:85:f1

Issuing Certificate URL: http://ldap2.sheca.com/root/shecaG2-1.der

Revocation information

OCSP Server: http://ocsp3.sheca.com/ShecaG2-1/shecaG2-1.ocsp
CRL Distribution Point: ldap://ldap2.sheca.com:389/cn=CRL6202.crl,ou=RA12050100,ou=CA13,ou=crl,o=UniTrust?certificateRevocationList?base?objectClass=cRLDistributionPoint
CRL Distribution Point: http://ldap2.sheca.com/CA13/RA12050100/CRL6202.crl

Check the revocation status for certificate www.ciac.sh.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ciac.sh.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ciac.sh.cn

Other certificates including the domain name ciac.sh.cn

(limited to 100 certificates)
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
App1.ciac.sh.cn
*.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
*.ciac.sh.cn
*.ciac.sh.cn
www.ciac.sh.cn
*.ciac.sh.cn

Certificate

The complete raw certificate details for www.ciac.sh.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LcFkME3Jglu91HtJYIp
nwro3nQTjO4SDzx2JFGph5fvtL9/c783Ck3ffW4OYwPl9ljgwWqm5ckk447Wn+rz
wgLSshklCL8JPiij3s2PbJnZs3TND3M27KgfmRVEIxS/ndhBq7bC98drDbz/aWjw
+TkoTJZlkl4xIIPiCBLsQegmFKZoetBI5KXNzXxXZ5Ckk1e0nLZf+VRW1U4fOkm0
ygo2Bder/s/9BbCqMd2aMvT30WEwMHWfVTW3n9FLRnlC0QDumlVaDcPPtsYPjCzy
XfrZbskgc0qBMXJFVSVHB8qT9JjTgnDjwPsYCEel+fZiKehvXbN+VbJbF81I4HUN
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127028726362797625068451809439194432979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA G2-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-24 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ciac'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ciac'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ciac.sh.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28367631696122126431795056303220656792505868547160769078914955247674024473556211191646284003265057030825219353774827369436789326025437258429408743805376266821636728046076859550998058387945035034038516549750668700511294902380711840350780905305194192493342416591740217350305805739442509965639067086066371493806865347127208326063378817179015358524793892082170232377498957060289302832578803091426881328197633891478005381802146331628107866063052632777444419116906126811806692884686449054200207799009859923561057169924733384002528578114213015710260505474143798170961302016145408781404355356983689041656355792175649393020247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f10765e389e2ddf2cdef4f67eb732d55c13338dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1ca85242a8cc16441a83e02f30ef428e9325ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.sheca.com/policy/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciac.sh.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap2.sheca.com:389/cn=CRL6202.crl,ou=RA12050100,ou=CA13,ou=crl,o=UniTrust?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/CA13/RA12050100/CRL6202.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.sheca.com/ShecaG2-1/shecaG2-1.ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/root/shecaG2-1.der'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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