control.gawetoko.com

Issued by WoSign CA Free SSL Certificate

About this certificate

This digital certificate with serial number 5d:ed:83:bf:a4:71:20:59:02:b0:5c:89:08:df:71:98 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=control.gawetoko.com

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:ed:83:bf:a4:71:20:59:02:b0:5c:89:08:df:71:98
Serial Number (int): 124851450142599351907328276976919081368
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dd:22:ec:99:6f:7a:33:de:ae:e8:8f:79:77:20:14:9f:54:76:36:25
AuthorityKeyId: b5:28:2a:79:e2:37:0e:05:a1:41:0a:cc:6c:f6:63:71:b1:d9:f9:3d

Fingerprint (sha1): 96:c0:fc:c2:92:5a:6b:37:de:5e:33:65:c5:0e:51:d6:d0:47:4c:39
Fingerprint (sha256): 88:31:1e:89:5d:55:b6:c1:11:81:2a:ec:94:d8:c5:72:42:af:a2:dc:27:f6:81:4c:8e:05:e3:35:67:41:dc:0c

Issuing Certificate URL: http://aia1.wosign.com/ca1.server1.free.cer

Revocation information

OCSP Server: http://ocsp1.wosign.com/ca1/server1/free
CRL Distribution Point: http://crls1.wosign.com/ca1-server1-free.crl

Check the revocation status for certificate control.gawetoko.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for control.gawetoko.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

control.gawetoko.com

Other certificates including the domain name gawetoko.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for control.gawetoko.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEqTCCA5GgAwIBAgIQXe2Dv6RxIFkCsFyJCN9xmDANBgkqhkiG9w0BAQUFADBS
MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxJzAlBgNV
BAMTHldvU2lnbiBDQSBGcmVlIFNTTCBDZXJ0aWZpY2F0ZTAeFw0xNTEyMDMwMzI0
MzhaFw0xNjEyMDMwMzI0MzhaMB8xHTAbBgNVBAMMFGNvbnRyb2wuZ2F3ZXRva28u
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZm3Pjrodfhi3A3K
KdXUF6KCoUejSE5n/ltG2y2zkpjgIWVeW2Gk7jcjKBO2x9L0bNVSJQje9VpNhN4t
KT9owbHvswXQYZ3yhp9F9SrKokb4LAlMWBMfGlMIjlAR7am2j+qEEXx/7yVuPUKD
VY5j+7s2GjCk8ZFi4HJpryh5WXBFgzqKVONv6AG478kl2zQioZ2q53pIwbUtVAyG
HNSDmKynyFSddRMWMjHD57+xGHBpRBR0Mdwi1rd86HW3D0S5qKFlg8VXs5zprjrs
SPBro6Em/oxSXZKNXGsSUqPICLR4osv73ZZHp2+k+q6IcW5oMNIztzjMuK4m7d9N
fMBZPQIDAQABo4IBrDCCAagwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMCBggrBgEFBQcDATAJBgNVHRMEAjAAMB0GA1UdDgQWBBTdIuyZb3oz3q7oj3l3
IBSfVHY2JTAfBgNVHSMEGDAWgBS1KCp54jcOBaFBCsxs9mNxsdn5PTB9BggrBgEF
BQcBAQRxMG8wNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwMS53b3NpZ24uY29tL2Nh
MS9zZXJ2ZXIxL2ZyZWUwNwYIKwYBBQUHMAKGK2h0dHA6Ly9haWExLndvc2lnbi5j
b20vY2ExLnNlcnZlcjEuZnJlZS5jZXIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov
L2NybHMxLndvc2lnbi5jb20vY2ExLXNlcnZlcjEtZnJlZS5jcmwwHwYDVR0RBBgw
FoIUY29udHJvbC5nYXdldG9rby5jb20wUAYDVR0gBEkwRzAIBgZngQwBAgEwOwYM
KwYBBAGCm1EBAQIGMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cud29zaWduLmNv
bS9wb2xpY3kvMA0GCSqGSIb3DQEBBQUAA4IBAQCz9QhSVAPa9EPzTkf4UTGA0u86
IGWPWfT/BEAuujMIYCJVcXl0PEYu7iyk3Hnoaz6LgEAM7285QGBAmck/w+ZfDwf9
Az0C1ebRz65AItrEgCKYlajO9cJ/jBUOp7dd0SY/wsY+juNM+ayB9/Dv5fU/15I1
K8v5aWDeP3aYWz1iOZP5zIHIU2mNDB13U5BgTxDVxjdBORS1rWuyPE5d9clZ437r
WOk/r4ezC5ZBXCQc38t6A/MvIVo+ZxWd0oS/lmFaCpHri41HxRvnGHx+uAeDzwBC
H2wP9L4DG7CZHzdmpZjBo9iswomTG29f7oSJJduMrNFVLx9l3sPx2t1P2Oo3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZm3Pjrodfhi3A3KKdXU
F6KCoUejSE5n/ltG2y2zkpjgIWVeW2Gk7jcjKBO2x9L0bNVSJQje9VpNhN4tKT9o
wbHvswXQYZ3yhp9F9SrKokb4LAlMWBMfGlMIjlAR7am2j+qEEXx/7yVuPUKDVY5j
+7s2GjCk8ZFi4HJpryh5WXBFgzqKVONv6AG478kl2zQioZ2q53pIwbUtVAyGHNSD
mKynyFSddRMWMjHD57+xGHBpRBR0Mdwi1rd86HW3D0S5qKFlg8VXs5zprjrsSPBr
o6Em/oxSXZKNXGsSUqPICLR4osv73ZZHp2+k+q6IcW5oMNIztzjMuK4m7d9NfMBZ
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124851450142599351907328276976919081368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Free SSL Certificate'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-03 03:24:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-03 03:24:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'control.gawetoko.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24944746161100568167344682679452644776111592892882000506877472617360652209574650296219257952555545573712814378212101035961452013770991393809309518465853903491051394091711275446194741528030995777928571452682449835056575759830463343333339281551591314378500997531899584518089164771582140798050542158761691510902940645122200802883361550303535798777158698334807936294337772100482133599154691504833212247399094452178993309208892566641213594404624287203516821507805340490416094928939677758085111335750824205131474010642737025031214136373476480042220541951147364091338558472019154098776370898344979518435660859011256052373821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd22ec996f7a33deaee88f797720149f54763625
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b5282a79e2370e05a1410acc6cf66371b1d9f93d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/ca1/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/ca1.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca1-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control.gawetoko.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.1.1.2.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b3f508525403daf443f34e47f8513180d2ef3a20658f59f4ff04402eba33086022557179743c462eee2ca4dc79e86b3e8b80400cef6f3940604099c93fc3e65f0f07fd033d02d5e6d1cfae4022dac480229895a8cef5c27f8c150ea7b75dd1263fc2c63e8ee34cf9ac81f7f0efe5f53fd792352bcbf96960de3f76985b3d623993f9cc81c853698d0c1d775390604f10d5c637413914b5ad6bb23c4e5df5c959e37eeb58e93faf87b30b96415c241cdfcb7a03f32f215a3e67159dd284bf96615a0a91eb8b8d47c51be7187c7eb80783cf00421f6c0ff4be031bb0991f3766a598c1a3d8acc289931b6f5fee848925db8cacd1552f1f65dec3f1dadd4fd8ea37