*.yn2oss.xstore.ctyun.cn

Issued by SHECA DV Server CA G5

About this certificate

This digital certificate with serial number 67:e8:5e:b3:15:be:42:13:86:13:c3:58:b9:04:dc:23 was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.yn2oss.xstore.ctyun.cn

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 67:e8:5e:b3:15:be:42:13:86:13:c3:58:b9:04:dc:23
Serial Number (int): 138117017172099441377559795838191197219
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f0:95:f2:f2:1c:86:93:cd:e5:bf:6a:59:b3:b6:4b:b1:f5:bc:09:bb
AuthorityKeyId: d8:e7:06:1b:64:5f:ab:30:08:88:7a:24:53:aa:e1:1c:83:04:bf:6d

Fingerprint (sha1): 83:51:4c:e2:e5:4e:85:2f:aa:d5:15:e6:2f:df:a7:4f:2a:90:ac:63
Fingerprint (sha256): 6c:1c:39:f5:b8:c8:81:79:f0:d8:ab:df:6e:66:7c:3f:25:9d:89:bb:fb:45:4b:1b:6e:dc:f0:3d:2f:0f:61:61

Issuing Certificate URL: http://certs.global.sheca.com/dvscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/dvscag5
CRL Distribution Point: http://crl.global.sheca.com/dvscag5.crl

Check the revocation status for certificate *.yn2oss.xstore.ctyun.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.yn2oss.xstore.ctyun.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.yn2oss.xstore.ctyun.cn
yn2oss.xstore.ctyun.cn

Other certificates including the domain name ctyun.cn

(limited to 100 certificates)
*.tjoss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.nm2oss.xstore.ctyun.cn
*.cqoss.xstore.ctyun.cn
*.hangzhou7.zos.ctyun.cn
*.hubei-41-website.zos.ctyun.cn
*.js2oss.xstore.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.ctyun.cn
*.ahoss.xstore.ctyun.cn
*.yichang2.website.zos.ctyun.cn
*.shandong-20.zos.ctyun.cn
*.snoss.xstore.ctyun.cn
*.ctyun.cn
*.xinan2-website.zos.ctyun.cn
*.shanghai-7.zos.ctyun.cn
*.liveplay.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hn6oss.xstore.ctyun.cn
*.hainan-2.zos.ctyun.cn
*.jiujiang-2.zos.ctyun.cn
*.huaihua1.zos.ctyun.cn
*.guangxi-5.zos.ctyun.cn
*.vaas.ctyun.cn
*.zhejiang-4.zos.ctyun.cn
*.ctapi.ctyun.cn
*.hb5oss.xstore.ctyun.cn
*.xinan2.zos.ctyun.cn
ctyun.cn
*.obs.ctyun.cn
*.hubei-41.zos.ctyun.cn
*.xzoss.xstore.ctyun.cn
*.yunnan-2.zos.ctyun.cn
*.sn2oss.xstore.ctyun.cn
*.changzhou3.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.ynoss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.gx3oss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
*.gzoss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.hn5oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
ctyun.cn
*.jiangsu-10.zos.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.shenyang8-website.zos.ctyun.cn
*.ctyun.cn
*.changsha42-website.zos.ctyun.cn
*.zhanjiang2.website.zos.ctyun.cn
*.jx2oss.xstore.ctyun.cn
*.guangdong-3.zos.ctyun.cn
*.snxaoss.xstore.ctyun.cn
*.sichuan-2.zos.ctyun.cn
*.huabei-2-website.zos.ctyun.cn
*.huaihua1.website.zos.ctyun.cn
*.nantong2-website.zos.ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.cq2oss.xstore.ctyun.cn
*.sxoss.xstore.ctyun.cn
*.beijing9.zos.ctyun.cn
*.ah3oss.xstore.ctyun.cn
*.zhengzhou5-website.zos.ctyun.cn
*.zj3oss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.suzhou3.zos.ctyun.cn
*.guangxi-5-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.shoss.xstore.ctyun.cn
*.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.taiyuan4-website.zos.ctyun.cn
*.hloss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.hioss.xstore.ctyun.cn
*.liaoning-5.zos.ctyun.cn
*.wulumuqi27-website.zos.ctyun.cn
*.shandong-20-website.zos.ctyun.cn
*.hubei-4.zos.ctyun.cn
*.yunnan-2.zos.ctyun.cn
naas.huaweicloud.com
*.xiangyang2.zos.ctyun.cn
*.hunan-4.zos.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.gz4oss.xstore.ctyun.cn
*.nm4oss.xstore.ctyun.cn
*.hboss.xstore.ctyun.cn
*.cn-nmhh1.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.chongqing-2.zos.ctyun.cn
*.nanchang5.zos.ctyun.cn
*.hn3oss.xstore.ctyun.cn

Certificate

The complete raw certificate details for *.yn2oss.xstore.ctyun.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEtE98L+p6ghx6eTMmu
AxVR3TuF+IV5gjXdAOzIc52/1tRDjWi8OpbaphHFs6B7sewBxuItFb7jnzKh84Bq
/ZbB1gBY66rCXotd6cFVuSVfPzGzqjDlz2j3RntrKaIZ8jPiJcoKbO1jGQsBP5Db
9ckim5yEFssRuvp1vN9EQ0lcSv2sh3IalQ0IuJB8aagu1S7lZcDnEThcPDfr9JOw
XVlmnU2su9fF2rkq/jxJeGyMQgnhPRHs0gLvQMoyEBcfHrQ3S0vUlJTwYrDRS7zL
0b2aIwbZIydRgqWe+LsCX4eoBeWTFNH4vc2L6CX7u4qskfpj1arhkagrpCe4n3Us
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138117017172099441377559795838191197219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA DV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 08:19:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yn2oss.xstore.ctyun.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22060723741681757739884950326825778380312677761740683685451471787623380838391157708154371660973484879421946886952337814986941748667763471734418957609142764016388861889819770044771790573455705948724611209773833105873085022768071539717029619468633650328623724184696521272468523500397309191800503691473170554421479728250717062932755114698274021649719214710049045866145469209402071899122006394450836499730446221447087257506273782162918683702759898797738583177827848489552883161210336773901251380024202181652833607369621509913365007847218732612226646152563288539018033220886680045791174359045237896270649240599441943374947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ba3b6f3430000040300473045022100e10911db9d9972b80137169271a1c3a7c3e1b45bd270689f0c6634b1f143bd6202206aac4cfbfb16e25e8cb35f5c0fea9b8122e7036346528476d3cfe5caeb27de5c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ba3b6f5810000040300473045022100803b6d00a79838dff63825c8b59d7eb7ab877ee55703aab737b36bbdc762d9c6022010436f99cabc91f4716fb23605245d0cb6639d7a09bcaef8790c347b4ef33d3a0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018ba3b6f5fa000004030046304402207c9650c07a64bc70b2c827386d16cae0edd081d1b832e71c2ed7e0e78689f465022037cc3ca6848a6007ca2d4e70bece02c6d680b04de8b535c6289feed13f6fe807
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/dvscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/dvscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8e7061b645fab3008887a2453aae11c8304bf6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yn2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yn2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f095f2f21c8693cde5bf6a59b3b64bb1f5bc09bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/dvscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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