hwdao.com

Issued by WoSign CA Free SSL Certificate G2

About this certificate

This digital certificate with serial number 6e:b2:c2:15:54:36:d2:23:fd:b2:fb:7a:ad:68:83:38 was issued on by WoSign CA Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=hwdao.com,2.5.4.13=#13344170706c7920467265652053534c2043657274696669636174652061742068747470733a2f2f6275792e776f7369676e2e636f6d

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:b2:c2:15:54:36:d2:23:fd:b2:fb:7a:ad:68:83:38
Serial Number (int): 147143244854477481741041111504020603704
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4f:a8:4c:53:a4:77:a1:89:bb:5b:d2:31:4f:d1:2a:0a:80:ca:47:a3
AuthorityKeyId: d2:a7:16:20:7c:af:d9:95:9e:eb:43:0a:19:f2:e0:b9:74:0e:a8:c7

Fingerprint (sha1): cf:7c:eb:4d:42:76:bc:e3:98:06:ad:50:8c:71:a0:65:ee:74:e8:97
Fingerprint (sha256): 5c:ca:af:61:39:2b:4e:e9:13:e1:8f:cd:96:59:5a:d4:76:15:d0:22:48:ca:e1:6a:8a:b1:87:11:42:8d:bd:4c

Issuing Certificate URL: http://aia6.wosign.com/ca6.server1.free.cer

Revocation information

OCSP Server: http://ocsp6.wosign.com/ca6/server1/free
CRL Distribution Point: http://crls6.wosign.com/ca6-server1-free.crl

Check the revocation status for certificate hwdao.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hwdao.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hwdao.com
www.hwdao.com
xianbeike.com
www.xianbeike.com

Other certificates including the domain name hwdao.com

(limited to 100 certificates)
hwdao.com
hwdao.com
gkx.liuchong.me
www.hwdao.com
loc.liuchong.me
hwdao.com
www.hwdao.com
gkx.liuchong.me
hwdao.com
hwdao.com

Certificate

The complete raw certificate details for hwdao.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsADrnZ28aeI7fIUBhNzq
CaAsmyxak2bAe4s+fLuqFTKGcBGRkgMf1o+oAsMq3oPlukZA4qISF6qg+29H3ARK
ZPIwF+P6o+QNWrv+J8JU1/XL7RMnZIiIjiz5Aux9wOlDI8uUNWJShLXOR4XlwHSe
DLB1DVk4xgd7wtPAjkgwngoXpnEefoW0YQTzHHQMf18VwwH3xXod6Mk09jbnJkUs
Y3YolIH+OCdYpYzktY82mFOVfcrUq/ktcz329sBPAmeT2s279Krxy5aWenDqpbd1
4u0k5DXEze27xyjHNvcO3hsAB9IJRqMRZ7hKjDx+cXnJozaj2vhLOIYd6HIB1DNZ
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147143244854477481741041111504020603704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-27 01:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-27 01:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apply Free SSL Certificate at https://buy.wosign.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hwdao.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22218395527253405597807716595536783789252999900009653706835572443569984678677593083485011026289606279510190353245675198030825770740545857009618141295995345276478149649109396076136325762021168638924937755573870988498164705028747208682152142287070394255876851776252401481041556640969277571666071371965940451626412295643545923207816507864235656569693922667512494826385476091978736932931504327486881792176934876135287488126293712049089677520652373535683246493559583650931615272784718801856771770630175328539867983555574095225568050356675897199268712641042081340110670526895316142977948826158241269282529789180164307114431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fa84c53a477a189bb5bd2314fd12a0a80ca47a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d2a716207cafd9959eeb430a19f2e0b9740ea8c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp6.wosign.com/ca6/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia6.wosign.com/ca6.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls6.wosign.com/ca6-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hwdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianbeike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xianbeike.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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