shirongfeng.com
Issued by WoSign CA Free SSL Certificate
About this certificate
This digital certificate with serial number 2e:53:d6:d4:cb:6d:c4:65:18:4a:bd:36:dd:1e:e7:d6 was issued on by WoSign CA Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Certificate Subject
CN=shirongfeng.com
WoSign CA Limited
Organization:
WoSign CA Limited
Country:
CN
This certificate has expire since
Certificate Details
Serial Number (hex): 2e:53:d6:d4:cb:6d:c4:65:18:4a:bd:36:dd:1e:e7:d6Serial Number (int): 61579805740348312685026707386136455126
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 04:b3:a2:fb:14:83:6d:3a:f9:99:2a:e9:e1:d7:b1:3e:6e:ad:c8:13
AuthorityKeyId: b5:28:2a:79:e2:37:0e:05:a1:41:0a:cc:6c:f6:63:71:b1:d9:f9:3d
Fingerprint (sha1): fc:cc:7c:60:90:52:68:71:99:b2:2a:df:93:e8:ee:fc:9b:b9:1d:a4
Fingerprint (sha256): 71:3d:ce:f8:c4:c8:ec:16:8f:f3:b9:76:7a:49:d4:5c:d1:67:ad:23:34:43:9b:11:c5:f9:3b:fa:d8:7e:11:85
Issuing Certificate URL: http://aia1.wosign.com/ca1.server1.free.cer
Revocation information
OCSP Server: http://ocsp1.wosign.com/ca1/server1/freeCRL Distribution Point: http://crls1.wosign.com/ca1-server1-free.crl
Check the revocation status for certificate shirongfeng.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shirongfeng.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shirongfeng.com
www.shirongfeng.com
www.shirongfeng.com
Other certificates including the domain name shirongfeng.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for shirongfeng.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIQLlPW1MttxGUYSr023R7n1jANBgkqhkiG9w0BAQUFADBS MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxJzAlBgNV BAMTHldvU2lnbiBDQSBGcmVlIFNTTCBDZXJ0aWZpY2F0ZTAeFw0xNTEyMDUxNTIw NTBaFw0xNjEyMDUxNTIwNTBaMBoxGDAWBgNVBAMMD3NoaXJvbmdmZW5nLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANl+TB4jvsSdsq0Oe1X/TzPF dUEBuXITg+v8+KbhVfmMyF8yvI1wAr6DqSpDde4DBrU3WlwXSC18pwVknPjKq9kQ thTbpuv9MPpfiYH4hGI6sr/VebgT7EfPxREnAUq19EctVgx13xZmdkQPBDdyG18M /4JxpoJEN5mkrTHnhzCANgdEVnkGhQuXNptpu1vdBxh7nH3B+HixaZtiwyBS9/yD JA+1cPinkvTGMm3PnaiPySUyqeIqCfkIbPGk0xSrEzND5LzKgiKRXCxkSMXTX3d0 eXBx6osJEvIihXHyPXb0hThaQNbvJISrGDpJmsr4oC8HcZDI86Bq4QkIxGyhfkkC AwEAAaOCAbwwggG4MAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYI KwYBBQUHAwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQUBLOi+xSDbTr5mSrp4dexPm6t yBMwHwYDVR0jBBgwFoAUtSgqeeI3DgWhQQrMbPZjcbHZ+T0wfQYIKwYBBQUHAQEE cTBvMDQGCCsGAQUFBzABhihodHRwOi8vb2NzcDEud29zaWduLmNvbS9jYTEvc2Vy dmVyMS9mcmVlMDcGCCsGAQUFBzAChitodHRwOi8vYWlhMS53b3NpZ24uY29tL2Nh MS5zZXJ2ZXIxLmZyZWUuY2VyMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmxz MS53b3NpZ24uY29tL2NhMS1zZXJ2ZXIxLWZyZWUuY3JsMC8GA1UdEQQoMCaCD3No aXJvbmdmZW5nLmNvbYITd3d3LnNoaXJvbmdmZW5nLmNvbTBQBgNVHSAESTBHMAgG BmeBDAECATA7BgwrBgEEAYKbUQEBAgYwKzApBggrBgEFBQcCARYdaHR0cDovL3d3 dy53b3NpZ24uY29tL3BvbGljeS8wDQYJKoZIhvcNAQEFBQADggEBAED+oXqyoHYT c2xBW0pVJ9p+EXd+y8T8AGd1ByzwF6zusxLbI8uaqwHCxmSLMU3mKofHQzJsDL2K 2zp3UhKVvYe3MWjgRS41GFzkJSdWp0QlcboUR3Is0sGMvM2pDsOMUvC1OgQQR+0e EAlVeuY2EkjrW9Nd23ngrBjbrr22TGV/abBpqH/1l97x9QCx3w0wQbj2xbDrE05V e2u/hDVoVtltHQxQaXSo+L+4DFgcsJs1J9B3PM7EieC8UTZs599yrIor2gOC1aG5 cXlisDepB9ApZotz+RwF4TKAUej2CuB2FUg6z2LOaEKraudAKJrcy+tyjGVsXDf8 Oh8vSsLzzVs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X5MHiO+xJ2yrQ57Vf9P M8V1QQG5chOD6/z4puFV+YzIXzK8jXACvoOpKkN17gMGtTdaXBdILXynBWSc+Mqr 2RC2FNum6/0w+l+JgfiEYjqyv9V5uBPsR8/FEScBSrX0Ry1WDHXfFmZ2RA8EN3Ib Xwz/gnGmgkQ3maStMeeHMIA2B0RWeQaFC5c2m2m7W90HGHucfcH4eLFpm2LDIFL3 /IMkD7Vw+KeS9MYybc+dqI/JJTKp4ioJ+Qhs8aTTFKsTM0PkvMqCIpFcLGRIxdNf d3R5cHHqiwkS8iKFcfI9dvSFOFpA1u8khKsYOkmayvigLwdxkMjzoGrhCQjEbKF+ SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 61579805740348312685026707386136455126 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-05 15:20:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-05 15:20:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shirongfeng.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27455991714661208945319814451126271272291465135025440329924592009670459082935780712369569081743406109402821664315682744990558688202546613462576704892736724495494134677344602143542918705535830635332245322158779648837201482069028847350721605907829854172499209125766674505423900304379491073304152890628109116089575185465264112992095283418144507301959996335841919490876519362587535729546517368408100655163324241148530394422495542868821724075623522205772268620203772198918078674367502125059393761303918938353887617154866030544361328085806453682370767168135772442490488099133061748030756266517148628406387360328115160186441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04b3a2fb14836d3af9992ae9e1d7b13e6eadc813 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5282a79e2370e05a1410acc6cf66371b1d9f93d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca1/server1/free' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca1.server1.free.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca1-server1-free.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirongfeng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirongfeng.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.1.1.2.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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