mail.anjielaw.com.cn

Issued by WoSign Class 1 DV Server CA

About this certificate

This digital certificate with serial number 12:30:bd:e4:06:c4:57:aa:e6:b9:1e:7a:b9:43:a9:4c was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=mail.anjielaw.com.cn

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 12:30:bd:e4:06:c4:57:aa:e6:b9:1e:7a:b9:43:a9:4c
Serial Number (int): 24179185614868574374445481199568922956
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ef:6a:13:31:16:0f:35:fa:43:ca:46:3a:c1:3c:8f:c5:1b:22:98:3c
AuthorityKeyId: 0c:d0:e1:be:b7:3e:17:a8:b6:e1:75:23:66:31:73:9d:7d:5d:da:f9

Fingerprint (sha1): fe:8d:d1:52:39:9d:20:99:66:ba:5c:20:4c:8d:f7:a4:8c:63:af:38
Fingerprint (sha256): 8b:8f:84:6b:8a:26:ff:39:99:af:ea:6a:94:c0:14:49:43:ac:9f:db:86:48:d2:e7:10:ed:d5:3a:32:c4:c6:01

Issuing Certificate URL: http://aia1.wosign.com/class1.server.ca1.cer

Revocation information

OCSP Server: http://ocsp1.wosign.com/class1/server/ca1
CRL Distribution Point: http://crls1.wosign.com/ca1-server-1.crl

Check the revocation status for certificate mail.anjielaw.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.anjielaw.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.anjielaw.com.cn

Other certificates including the domain name anjielaw.com.cn

(limited to 100 certificates)
mail.anjielaw.com.cn

Certificate

The complete raw certificate details for mail.anjielaw.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZaWfK3deZO4RmT9UKBN
/FufxkudYQ4m351fXjAuy9Ku38fGWpQGnHSbhcHb0apskx3EPELevFlWfkbQZPQq
oCfv24zqAJkJ6a/WbNtvGiPbaetMJRncTD8JT9793Z34qmzK9FTnyHKS2B8oBGK0
xsPkIGiToJW+FMhnK7StlL22zc3q2idBD6oWemk8BY4S8VqCkjJr3XQNADTsT/nG
tK+FxyOLGDM4dMn1Ab3gKbVEBaNaNFUIXaFZjHTyt4umDluPYjH7wOLOVZ+4Kv2/
+xLlROdTyv/E99GpSueUTi32MxNbz78VZbl8fSU56yaxbCeMAudeWLK8ooNoqV90
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24179185614868574374445481199568922956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-26 07:24:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-26 07:24:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.anjielaw.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28477876248863848361212843175640339768037206039299006553476909566018658876392968229899801459352584621651381818245960136803376570269529718740476679558712810562185907499745750281686616621300752330536389879800488616643923209775094329930779059674512414848225043727471342957125487665664898196080816606779433144889344894813273529443619938207441299428301846325307514087657071394338007453471023479272292827901626055887859682773484932731178985531452069795772508586501039211268735301866155406630246450961178546541528131930328637495900386553830629807184300702736965573767642274497387803281310150562170138102209452397765586810051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef6a1331160f35fa43ca463ac13c8fc51b22983c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cd0e1beb73e17a8b6e175236631739d7d5ddaf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.wosign.com/class1/server/ca1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.wosign.com/class1.server.ca1.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls1.wosign.com/ca1-server-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.anjielaw.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.1.1.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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