cdn.c3edge.net

- ChinaCache North America -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 5b:37:c3:79:1f:b1:4e:22:4f:29:f7:11:e4:26:fa:eb was issued on by GeoTrust Inc..

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

ChinaCache North America

Organization: ChinaCache North America
State / Province: California
Locality: Diamond Bar
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:37:c3:79:1f:b1:4e:22:4f:29:f7:11:e4:26:fa:eb
Serial Number (int): 121249288609935520407545949208535562987
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 69:67:45:c5:ff:67:8e:b6:7b:c2:93:4a:75:1f:f5:9f:e2:0b:c3:31
Fingerprint (sha256): 88:6a:31:14:8d:97:40:6f:10:b7:e6:9e:e7:22:07:f4:f9:b2:f2:f3:8d:14:07:d8:a8:16:f7:6f:57:3a:46:58

Issuing Certificate URL: http://gtssl2-aia.geotrust.com/gtssl2.cer

Revocation information

OCSP Server: http://gtssl2-ocsp.geotrust.com
CRL Distribution Point: http://gtssl2-crl.geotrust.com/gtssl2.crl

Check the revocation status for certificate cdn.c3edge.net

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.c3edge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sothebys.com
a3.muscache.com
tsgx.fxcorporate.com
sportsco-cde-cdn.bpsgameserver.com
img.china.coach.com
player.ooyala.com
www.englishcentralchina.com
china.coach.com
traderstaticcc.iforex.com
cdn.ssl.c3edge.net
tradercc.iforex.com
chinaec.stage.coach.com
tsg.fxcorporate.com
www.extrabux.com
chinaecinternal.coach.com
iat-inmobi.c3edge.net
a0.muscache.com
static.extrabux.com
a1.muscache.com
chinaec.qa.coach.com
tsweb.fxcorporate.com
www.apbinary.com
a2.muscache.com
rovio-stage.c3edge.net
cdn.c3edge.net

Other certificates including the domain name c3edge.net

(limited to 100 certificates)
cdn03.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
munin.orca.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net

Certificate

The complete raw certificate details for cdn.c3edge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFp/8fmZDFJPQ4r9xJ2p
I8tR29uYkdRXXCgHHZXB1KaDc4+q5xJtLEx9B9V5xH44YbbXYzFVXhaNYqUtGd5K
HvK5DbwFNIEQIl2BkDc6tYF9xT50Ej8KvoAjRS+zGDB1ByCRxWNJ4Y0SGS0zkYeS
if1kKZjsZjDZHtwCnW/AJA9w2QgqdzWn6+8xOfCvCAEed2ahIr4iolPREQwM+rdf
ITSIgf89TRjWOuh9+q4fhpO3rCMynJ1eXRdYpQR9He9bOuwe7KvnoxGfl/vjuw//
c/x9+tZq82SryRywu/CvQuXrpluoXcOEhHHbZEC9uyebjYMYjE4ESb82r6dDxbJO
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121249288609935520407545949208535562987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Diamond Bar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ChinaCache North America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'cdn.c3edge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22262568781775710698294480856125421518697577319240840168073938023910641593848863246011118705042151149669912548335784217644626862283567965095361267135347125264267904909823074682856020189566008368840006414514418074548204452220823952485984405677670129015547363653730572666534333054561090596102978627970566705306928520628401658410460891780093063745157301326722448414224117577504237517455383676046446039802984097625450023531640121589835293724160094558578122220437119896362637191269511854920990748936569080725021167202196768646366780448821565429868606439856229012560764964122855224709454372080213488702881608513871166983899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sothebys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3.muscache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsgx.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsco-cde-cdn.bpsgameserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.china.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.ooyala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.englishcentralchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traderstaticcc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ssl.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradercc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaec.stage.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extrabux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaecinternal.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iat-inmobi.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a0.muscache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.extrabux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.muscache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaec.qa.coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsweb.fxcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apbinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.muscache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovio-stage.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.c3edge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-crl.geotrust.com/gtssl2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl2-aia.geotrust.com/gtssl2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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