*.gs2oss.xstore.ctyun.cn

Issued by SHECA DV Server CA G5

About this certificate

This digital certificate with serial number 40:c1:92:ce:80:9e:4a:e4:84:64:39:2c:b5:90:30:85 was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.gs2oss.xstore.ctyun.cn

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 40:c1:92:ce:80:9e:4a:e4:84:64:39:2c:b5:90:30:85
Serial Number (int): 86075682616540893887633952358987214981
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0f:2d:b1:7e:58:b6:71:47:d4:54:3b:64:8c:7a:4b:51:f4:4f:b6:61
AuthorityKeyId: d8:e7:06:1b:64:5f:ab:30:08:88:7a:24:53:aa:e1:1c:83:04:bf:6d

Fingerprint (sha1): 2d:d8:49:eb:29:03:ef:0b:c4:ac:09:e9:2d:fe:cc:e5:0d:3a:e2:20
Fingerprint (sha256): 60:dc:6c:6f:fc:16:13:47:39:28:8f:2e:62:ef:ec:13:b8:38:42:f1:7f:90:87:f8:13:53:46:79:b3:7d:4b:a7

Issuing Certificate URL: http://certs.global.sheca.com/dvscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/dvscag5
CRL Distribution Point: http://crl.global.sheca.com/dvscag5.crl

Check the revocation status for certificate *.gs2oss.xstore.ctyun.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gs2oss.xstore.ctyun.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gs2oss.xstore.ctyun.cn
gs2oss.xstore.ctyun.cn

Other certificates including the domain name ctyun.cn

(limited to 100 certificates)
*.tjoss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.nm2oss.xstore.ctyun.cn
*.cqoss.xstore.ctyun.cn
*.hangzhou7.zos.ctyun.cn
*.hubei-41-website.zos.ctyun.cn
*.js2oss.xstore.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.ctyun.cn
*.ahoss.xstore.ctyun.cn
*.yichang2.website.zos.ctyun.cn
*.shandong-20.zos.ctyun.cn
*.snoss.xstore.ctyun.cn
*.ctyun.cn
*.xinan2-website.zos.ctyun.cn
*.shanghai-7.zos.ctyun.cn
*.liveplay.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hn6oss.xstore.ctyun.cn
*.hainan-2.zos.ctyun.cn
*.jiujiang-2.zos.ctyun.cn
*.huaihua1.zos.ctyun.cn
*.guangxi-5.zos.ctyun.cn
*.vaas.ctyun.cn
*.zhejiang-4.zos.ctyun.cn
*.ctapi.ctyun.cn
*.hb5oss.xstore.ctyun.cn
*.xinan2.zos.ctyun.cn
ctyun.cn
*.obs.ctyun.cn
*.hubei-41.zos.ctyun.cn
*.xzoss.xstore.ctyun.cn
*.yunnan-2.zos.ctyun.cn
*.sn2oss.xstore.ctyun.cn
*.changzhou3.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.ynoss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.gx3oss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
*.gzoss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.hn5oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
ctyun.cn
*.jiangsu-10.zos.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.shenyang8-website.zos.ctyun.cn
*.ctyun.cn
*.changsha42-website.zos.ctyun.cn
*.zhanjiang2.website.zos.ctyun.cn
*.jx2oss.xstore.ctyun.cn
*.guangdong-3.zos.ctyun.cn
*.snxaoss.xstore.ctyun.cn
*.sichuan-2.zos.ctyun.cn
*.huabei-2-website.zos.ctyun.cn
*.huaihua1.website.zos.ctyun.cn
*.nantong2-website.zos.ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.cq2oss.xstore.ctyun.cn
*.sxoss.xstore.ctyun.cn
*.beijing9.zos.ctyun.cn
*.ah3oss.xstore.ctyun.cn
*.zhengzhou5-website.zos.ctyun.cn
*.zj3oss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.suzhou3.zos.ctyun.cn
*.guangxi-5-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.shoss.xstore.ctyun.cn
*.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.taiyuan4-website.zos.ctyun.cn
*.hloss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.hioss.xstore.ctyun.cn
*.liaoning-5.zos.ctyun.cn
*.wulumuqi27-website.zos.ctyun.cn
*.shandong-20-website.zos.ctyun.cn
*.hubei-4.zos.ctyun.cn
*.yunnan-2.zos.ctyun.cn
naas.huaweicloud.com
*.xiangyang2.zos.ctyun.cn
*.hunan-4.zos.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.gz4oss.xstore.ctyun.cn
*.nm4oss.xstore.ctyun.cn
*.hboss.xstore.ctyun.cn
*.cn-nmhh1.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.chongqing-2.zos.ctyun.cn
*.nanchang5.zos.ctyun.cn
*.hn3oss.xstore.ctyun.cn

Certificate

The complete raw certificate details for *.gs2oss.xstore.ctyun.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wuiDV6lFgNx6rhvJyBJ
svoqHpm312oIJAKatr0xDPsd8kvVmc218P3MYEMgplBSy6ZxiZbDif/FYF532o2m
tYnutAUx1qVt8tzjkNt8m+YLPNR0KtSrOIQgFR6q4+ZToRupMourYts7KlDy+D5C
7ls9TWJtXuU5u4l2VNaAnMHHZqL3c/klqXLcVgxMEeO3BVMgHZXlJQV32OyjJXUV
9x4KdUY7AKocjOEYd9mYAzhX6HozDhr3ryPEBKGmQudgLJ0F2GWWZGre8CeL5sXp
HkJG8wQeGIIYklt6LmGPPxdly1c06i6q11MZm3vFnpccaRet5Wn8CCnuWcWY5zcs
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86075682616540893887633952358987214981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA DV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 07:00:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gs2oss.xstore.ctyun.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27651925241806293272541841388310986979070514622472643674720732141079865489517500612581966943227100169383737357974621157396165554385840251535226715526968129391715054216846445833635439895671035849807614968136710880469641073668485111612023404168295397875818990112617204160744753793220780409610391085574399656454125940461750004008691848053225956882412900379999376546034119559867553399668760547013562179387840458872195653688921165481571513139616214698734462584056782629450134966932447210618737370640624498203795927980199657231244466376269819078192053695928247418860564072461784263950840464838788939828351073143658871467237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/dvscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/dvscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8e7061b645fab3008887a2453aae11c8304bf6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gs2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f2db17e58b67147d4543b648c7a4b51f44fb661
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/dvscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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