ws.cupdapp.net

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 05:fe:89:4c:bf:63:e1:80:6c:e9:55:de:22:46:4e:03 was issued on by TrustAsia Technologies, Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: Shanghai
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fe:89:4c:bf:63:e1:80:6c:e9:55:de:22:46:4e:03
Serial Number (int): 7967768151680862378612061009730752003
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 42:c3:57:bc:ac:a0:d0:df:b2:ce:29:df:a6:0c:10:85:f0:1d:bd:76
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): 55:18:be:a1:8a:9f:de:73:84:0f:88:d8:4f:c7:df:3e:67:e7:9a:14
Fingerprint (sha256): 7b:32:1e:a0:cb:d0:02:f4:b7:a5:12:00:fe:03:6b:b5:e5:f6:a8:03:35:cf:02:69:65:8a:07:7b:aa:a4:d1:9d

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate ws.cupdapp.net

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.cupdapp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.cupdapp.net
ccapply.fjnx.com.cn
ws1.qzccbank.com
coas.jshbank.com
fbc.qlbchina.com
fraud.cupdapp.com
iws.ccabchina.com
ccoa.gsrcu.com
groupdeal.ynrcc.com
netapply.ynrcc.com
datacard.mintaibank.com
ysrlk.boubank.com
ccmms.grcbank.com
youcard.bankofrizhao.com.cn
xykapply.xrcbank.com.cn
apply.creditcard.xjrccb.com.cn
credit.zjrcbank.com
wscreditcard.jinzhoubank.com
xykapply.hnlyrcb.com
cupdapply.hkbea.com.cn
online.cbhb.com.cn
creditcardsq.trcbank.com.cn

Other certificates including the domain name cupdapp.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for ws.cupdapp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46DjIwlWofYtp0A17sMK
mYL11N9+rT5nZuzwo2eXl7E7z0+drbxC+OKuW5rRFf0IiNXDBdvXtOv4R4+mXf1d
2NZkxwVjVk7EBe/sR7UMRMVvOGBboAHn06FpPjt8ynJ76oSMG6qCkb3SXjrc/Wnb
b/vvfew1xZrpLFsvnXzbM7eIrA/S4sLWl3oKWZKCZ4bsUGG7+pKfwXkeOe3JX8xv
WM5y39MwrVtE1HsFu7h0rtot/YNyYL1zYabVl8l3rdu1LZFFdlX0nsCnKYQ0y0++
0i6sJmv13QObBYL418VC1Ux/l63fmqpn/Mxa0mvrQ4nPr/ReV7AL7KUR9JeTP9jm
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7967768151680862378612061009730752003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.cupdapp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28735431688839624339271182017252672483018737111250337971994165290361966942670921786851130416749211305412190321345958328758948135935800564298354771328586096275412810527668798767959993450121320172806355009985119741630621709236358058826238785012131319322494763474666706737614119454546517081008746373613875207182440121257654367470746032405284190465180542565225469750127368214786673523826938196030259800857372116544712184719551424663227729465509325759495644020216625169621380622956650000330743971593996376999518682205922290001742751049362674736326096553230436972218277912200814737541837877125312141761864303204057398961777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42c357bcaca0d0dfb2ce29dfa60c1085f01dbd76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cupdapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapply.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws1.qzccbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coas.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbc.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iws.ccabchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccoa.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdeal.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapply.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacard.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysrlk.boubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmms.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.xrcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.creditcard.xjrccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit.zjrcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscreditcard.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.hnlyrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupdapply.hkbea.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cbhb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardsq.trcbank.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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