www.ciac.sh.cn

- 上海市建筑建材业受理服务中心 -

Issued by SHECA

About this certificate

This digital certificate with serial number 63:33:d8:96:68:d7:47:02:6a:12:73:f4:70:78:1f:b5 was issued on by SHECA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyAgreement KeyEncipherment] (00011111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • X520 Subject fields MUST only contain printable control characters (RFC 5280: Appendix A)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

上海市建筑建材业受理服务中心

Organization: 上海市建筑建材业受理服务中心
Organization unit: 上海市建筑建材业受理服务中心
State / Province: 上海
Locality: 上海
Country: CN

SHECA

Organization: SHECA

This certificate has expire since

Certificate Details

Serial Number (hex): 63:33:d8:96:68:d7:47:02:6a:12:73:f4:70:78:1f:b5
Serial Number (int): 131862771639637408932188269241880289205
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 62:5b:6c:84:86:4d:ef:8b:1f:37:5d:a6:30:52:fb:d6:f0:00:03:47
AuthorityKeyId: d4:50:c9:74:93:7d:34:9a:b6:bf:c8:22:04:50:d8:7c:45:3c:85:70

Fingerprint (sha1): 37:38:ea:9e:65:4a:e1:90:56:bd:8a:e2:b4:28:26:6f:77:27:42:f3
Fingerprint (sha256): a5:b8:8f:41:b4:62:c6:14:4d:64:37:e1:2d:00:aa:ea:14:9c:2d:0c:2f:6f:58:fa:06:cd:e7:f2:c7:5a:2f:9e

Issuing Certificate URL: http://ldap2.sheca.com/root/shecasub.der

Revocation information

OCSP Server: http://ocsp3.sheca.com/Sheca/sheca.ocsp
CRL Distribution Point: ldap://ldap2.sheca.com:389/cn=CRL6.crl,ou=RA9020100,ou=CA11,ou=crl,o=UniTrust?certificateRevocationList?base?objectClass=cRLDistributionPoint
CRL Distribution Point: http://ldap2.sheca.com/CA11/RA9020100/CRL6.crl

Check the revocation status for certificate www.ciac.sh.cn

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ciac.sh.cn

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ciac.sh.cn

(limited to 100 certificates)
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
App1.ciac.sh.cn
*.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
www.ciac.sh.cn
*.ciac.sh.cn
*.ciac.sh.cn
www.ciac.sh.cn
*.ciac.sh.cn

Certificate

The complete raw certificate details for www.ciac.sh.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEUDCCA7mgAwIBAgIQYzPYlmjXRwJqEnP0cHgftTANBgkqhkiG9w0BAQUFADAg
MQ4wDAYDVQQKEwVTSEVDQTEOMAwGA1UEAxMFU0hFQ0EwHhcNMDkxMTExMDkxOTAy
WhcNMTExMTExMDkxOTAyWjCBkjELMAkGA1UEBhMCQ04xDTALBgNVBAgeBE4KbXcx
DTALBgNVBAceBE4KbXcxJTAjBgNVBAoeHE4KbXdeAl76e1Fe+mdQThpT13QGZw1S
oU4tX8MxJTAjBgNVBAseHE4KbXdeAl76e1Fe+mdQThpT13QGZw1SoU4tX8MxFzAV
BgNVBAMTDnd3dy5jaWFjLnNoLmNuMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQDYK1zJ8bQ3P4y1wl3JB5a+7XBGUEbKUWzmuEcLMC7Sb4JV7fmCLm53OZxPg6vz
u6NlIRCujvUY/GRUnu5n+FwNvWN4lRKGdXRU519+DizV753htLN+Tmf9Rq7j0Lk+
tB5sbMPFf5uwtLv1HJCHLvzP9MI++61zCyr4WVX+nOGjLwIDAQABo4ICFjCCAhIw
HwYDVR0jBBgwFoAU1FDJdJN9NJq2v8giBFDYfEU8hXAwHQYDVR0OBBYEFGJbbISG
Te+LHzddpjBS+9bwAANHMAsGA1UdDwQEAwID+DAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwQQYDVR0gBDowODA2BggqgRwBxTiBFTAqMCgGCCsGAQUFBwIB
FhxodHRwOi8vd3d3LnNoZWNhLmNvbS9wb2xpY3kvMAkGA1UdEwQCMAAwgdoGA1Ud
HwSB0jCBzzCBlqCBk6CBkIaBjWxkYXA6Ly9sZGFwMi5zaGVjYS5jb206Mzg5L2Nu
PUNSTDYuY3JsLG91PVJBOTAyMDEwMCxvdT1DQTExLG91PWNybCxvPVVuaVRydXN0
P2NlcnRpZmljYXRlUmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxE
aXN0cmlidXRpb25Qb2ludDA0oDKgMIYuaHR0cDovL2xkYXAyLnNoZWNhLmNvbS9D
QTExL1JBOTAyMDEwMC9DUkw2LmNybDB5BggrBgEFBQcBAQRtMGswMwYIKwYBBQUH
MAGGJ2h0dHA6Ly9vY3NwMy5zaGVjYS5jb20vU2hlY2Evc2hlY2Eub2NzcDA0Bggr
BgEFBQcwAoYoaHR0cDovL2xkYXAyLnNoZWNhLmNvbS9yb290L3NoZWNhc3ViLmRl
cjANBgkqhkiG9w0BAQUFAAOBgQBKja9t8hK2pzt/581TZ13UzOA+ciuR4h4Zwo45
6ykqp+BULqwmc1DUcaNvNAlp2J3bA76z7MZEHe2usyq7iffyW22NyNrDSvdGbkkM
LauYP7n0xAvM4u+Zq67l5ObrslPbw0/6S7dRvgCVUWymjvnHpoOguzBWN+JwmDMV
HNTpHw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYK1zJ8bQ3P4y1wl3JB5a+7XBG
UEbKUWzmuEcLMC7Sb4JV7fmCLm53OZxPg6vzu6NlIRCujvUY/GRUnu5n+FwNvWN4
lRKGdXRU519+DizV753htLN+Tmf9Rq7j0Lk+tB5sbMPFf5uwtLv1HJCHLvzP9MI+
+61zCyr4WVX+nOGjLwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131862771639637408932188269241880289205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHECA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHECA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-11-11 09:19:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-11 09:19:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [78 10 109 119]
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [78 10 109 119]
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [78 10 109 119 94 2 94 250 123 81 94 250 103 80 78 26 83 215 116 6 103 13 82 161 78 45 95 195]
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [78 10 109 119 94 2 94 250 123 81 94 250 103 80 78 26 83 215 116 6 103 13 82 161 78 45 95 195]
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ciac.sh.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 151799304161940793629231475905538500106202682712718334879571071369270079955466757588421180381502056017883752728061860809238287115992592284969211685048040376630650434601898942018985326712691601955676027122127567214391658590674405735152486404439049448210232082461949574697035658761096851434466119629077188027183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d450c974937d349ab6bfc8220450d87c453c8570
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							625b6c84864def8b1f375da63052fbd6f0000347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.1.8888.149
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.sheca.com/policy/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap2.sheca.com:389/cn=CRL6.crl,ou=RA9020100,ou=CA11,ou=crl,o=UniTrust?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/CA11/RA9020100/CRL6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.sheca.com/Sheca/sheca.ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/root/shecasub.der'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		004a8daf6df212b6a73b7fe7cd53675dd4cce03e722b91e21e19c28e39eb292aa7e0542eac267350d471a36f340969d89ddb03beb3ecc6441dedaeb32abb89f7f25b6d8dc8dac34af7466e490c2dab983fb9f4c40bcce2ef99abaee5e4e6ebb253dbc34ffa4bb751be0095516ca68ef9c7a683a0bb305637e2709833151cd4e91f