shuge.org

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 6b:bf:a4:2b:08:62:0a:cd:b9:3f:46:4c:d3:90:a9:4d was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shuge.org

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate will expire on

Certificate Details

Serial Number (hex): 6b:bf:a4:2b:08:62:0a:cd:b9:3f:46:4c:d3:90:a9:4d
Serial Number (int): 143222453973546543292561547252638722381
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 11:15:05:10:71:05:5b:63:3d:48:a6:15:e8:21:dc:07:7c:76:f7:6d
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 6a:ce:6f:9f:6e:db:90:17:3e:5f:83:28:84:88:91:df:ae:d1:24:09
Fingerprint (sha256): 4e:c4:eb:88:29:8b:88:c5:27:f5:0c:13:b3:52:16:9d:59:b2:77:7e:6e:56:3b:fc:33:cd:fe:da:d9:1d:d9:69

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate shuge.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shuge.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shuge.org
*.shuge.org

Other certificates including the domain name shuge.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for shuge.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IEAOBuTMXPR4KWH8+O+
JwczKmKxaDNckCJ5JFxdgSRL+tD7WxGmBoY3OU8G5gdhs/fKwV4ABsivNZ2df49e
0GvpDQJcslX+PuYM9RXMY78euJS0Dx2ijCdujh0/Sv0uGwpqxW7y7JE7ZANubVJ+
95umoqK9YhsH+QodwFoaIaKVQ02IMD8T+WPGhKXFy6TKqyRxKt6QZydiVQSsHIaf
V7As2p1kbaTHoiHgJTWdQEXIEeptRZiXqeMA4Vmo9cUUjduTTOy3/o0YAyt8KD14
oP1kZBsFWt12cXP/miTp9E6tbIVcG/zIkOiQf+T0d03a9CBcJD/E5QCl/3MiJGJw
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143222453973546543292561547252638722381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shuge.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27331086565706755199008397983534424177094008244941231645166354604395405567312465990775904643362418385119675794919802629647089566793264437886496369795505314258019019402513913067943288271278087536967329425590024209962855408982398397553517340564168814089648341575513661274934402682890424011145817594317069059576603809970967103896091103908981183067347021207491540712885671573094091235855849045853618127070017788761197279750931790349713915899757513265812800598727682980607284361300768579992860327419670075124053001626585613143603819496073139795074710813447605795685896269068864262674072669760161781889835306299419439296611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1115051071055b633d48a615e821dc077c76f76d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5e4a1d150000040300483046022100acb599f831c548c72259b4d9006449cfc36c00ade094a30304766d492c16a04402210083ab0cb07d5b3049181e3353cd1e2db1b29cc79b92305b1c62d29042fcce37e30076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5e4a1cf70000040300473045022079962253f17cf6e778043561891caa3a0f318e31eea65c0124ccf174475db706022100fc0476461b7da640a4404578c28f0cb656bdd56612c2326fe4ac367bc4a696bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuge.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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