ngzx.candcprinting.com.cn

Issued by Encryption Everywhere DV TLS CA - G1

About this certificate

This digital certificate with serial number 07:93:14:5c:5c:bf:b1:fc:1c:bf:24:c9:7f:49:b7:26 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ngzx.candcprinting.com.cn

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:93:14:5c:5c:bf:b1:fc:1c:bf:24:c9:7f:49:b7:26
Serial Number (int): 10068276574586421362076699731941766950
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 61:3a:ac:b9:af:c1:4a:ff:5d:89:78:6e:bd:19:f5:71:0f:25:5b:cd
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7

Fingerprint (sha1): 19:1c:36:76:8c:15:10:54:fe:12:1b:5f:13:73:14:40:e2:39:fd:86
Fingerprint (sha256): 8b:17:a5:35:15:53:47:a8:4c:fa:c9:91:88:e1:97:7e:06:81:cc:f5:e9:c6:5c:0b:46:83:7a:56:04:b7:37:51

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate ngzx.candcprinting.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngzx.candcprinting.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ngzx.candcprinting.com.cn

Other certificates including the domain name candcprinting.com.cn

(limited to 100 certificates)
weixin.candcprinting.com.cn
sys.candcprinting.com.cn
weixin.candcprinting.com.cn
sys.candcprinting.com.cn
apps.candcprinting.com.cn
ngzx.candcprinting.com.cn
oa.candcprinting.com.cn
shcontroller.candcprinting.com.cn
shcontroller.candcprinting.com.cn
sys.candcprinting.com.cn
weixin.candcprinting.com.cn

Certificate

The complete raw certificate details for ngzx.candcprinting.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWg/e9AEFL5IvkKpK3n
8qC6Yc8W8QHbDrmenzfZkrW9GBkKQDzeGDBFobTYz07YU32M67OEoygD/f0b7X5D
/RLCS8BFwQ+hDUN1iU/z1ruECqBNr8FyQmrqNwbqGS1sXNsBGgQV7ek3J3dx1DTn
bxVleOKmAUtwKoNVEcg9AqXG4v2Tbqxy/Co1tpDEn/P4NhaXOkBZIhkYrQnxmAhX
3TsIWtM1/qOTFob7lcSIa9hhT2BJFQzkGziSN8fR5inqrA14Qws5Jjago4tbQgJK
RQCXfRfE1lwK2kfkxeg1A/DEel3A91inqTtiLA6cyoa7IxLpS69xvorB4e8s00Hz
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10068276574586421362076699731941766950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ngzx.candcprinting.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22244387057790632699521963101610496545046986763611464753101408816128520767622942110472601218749048110048539648091545236323943265507369933069282209699455229095536861858473933138158577187027519720130880239091902027652535660830053933496658253935203804163233475546889816485241304805725505954038502545560346172151549533757985676015688986076984669309307119469098344086910063111099257512152399070858404459446904862930198540583313159768922243889180606630888856951435137568681773692890392626062959695205973153032908611781898457117237184491860823757817036634463067827821329198653365941407471098490103190342787245958038779196341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							613aacb9afc14aff5d89786ebd19f5710f255bcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngzx.candcprinting.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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