api.ws.cupdapp.net

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 07:8e:1e:a4:80:58:56:3e:67:5f:a0:20:ad:4f:53:c3 was issued on by TrustAsia Technologies, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: 上海市
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 07:8e:1e:a4:80:58:56:3e:67:5f:a0:20:ad:4f:53:c3
Serial Number (int): 10042523629833992526964827553985942467
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e2:31:bf:be:57:a0:83:2b:71:d5:50:ca:1d:69:3c:95:77:36:58:b5
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): ab:34:91:6c:14:92:51:aa:10:3e:ab:14:b3:23:14:18:ea:d6:81:c1
Fingerprint (sha256): a8:b5:4c:2b:7c:36:9e:77:82:da:3c:1e:4e:38:d0:1f:d7:7d:9f:b2:30:f3:83:54:59:2b:76:7d:24:09:a0:ad

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate api.ws.cupdapp.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ws.cupdapp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ws.cupdapp.net
ws2.qzccbank.com
coas-api.jshbank.com
fba.qlbchina.com
api.fraud.cupdapp.com
api.iws.ccabchina.com
ccoae.gsrcu.com
cloudcard.mintaibank.com
ysrlk-hd.boubank.com
api.youcard.bankofrizhao.com.cn
api.xykapply.xrcbank.com.cn
apply-api.creditcard.xjrccb.com.cn
api.xykapply.hnlyrcb.com
api.wjws.bankofnx.com.cn

Other certificates including the domain name cupdapp.net

(limited to 100 certificates)
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net

Certificate

The complete raw certificate details for api.ws.cupdapp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUbzI9bvD7qLzzI6NokP
nGbF6yweTb9l/StGWjBPOd8fw3V5hFpxlCzSQDNzE1ahTtSM2omxS/n6cmRXpGs3
foFl0FCfan08HU/C3MnIRpNQmnjpp2JA4Uw1oIp4TgRLIBdmuNcmwigvBxrIlGjY
QdxJtCwZNU93VtmYHRkhW0A9Z+CaW/ckQipjG7ltWOeyGxddaiBDlDAT4x9w0Myr
jQq8LbuSJ2QhKACSBQf+inhW43Qr/gEszy7qAvZqGcUBHCzrFkzg0KalTygZZaqT
u0LQ2R5scg3J6X7Ydh5XY9tBHOuHMjjYisK02rYj5VB1wm+yO6iN2wt29FDGrV6i
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10042523629833992526964827553985942467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ws.cupdapp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22379166612388627300253005485903676535663795625586344021025999334778675285932825603559432646038531223102276978710338895310245998178843080703797021643200177047849576864055032284713109984627136509373392038982284483828842961785093941016399230184720978771071251417289816933167186365186250152013059160289843286672149086018984025028984915360788312537973036907435424309073805132910812735397049118572548505776439416473405112674037547992065042032825997356515818816589747285040348958111650593554816402754200052937508632843386929337765184298630548413190943979469888693208002805315422606199126797016964872339367939578074597597711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e231bfbe57a0832b71d550ca1d693c95773658b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ws.cupdapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws2.qzccbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coas-api.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.fraud.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.iws.ccabchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccoae.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudcard.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysrlk-hd.boubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.youcard.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.xykapply.xrcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply-api.creditcard.xjrccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.xykapply.hnlyrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wjws.bankofnx.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0089d6d6c9f6aec4ca93601b929ede190c141751df897993e3976e3f474244dc7a2ffea7c699da451aa397e2d0d6f32c693ee6f783ee7ebf658e99b063de529145560a6038c0aa8a1b647820d9c495bb06c8cb0fb3fb48f036b2e267fe7f799d39264606be3de31e0ab53b4ab71a627b7034526dfb34045ad392ba1ed412907d95f54fb3f1a7f406ded11401e1684ab6b17acc4e7403baec353f5e5697b3cb83f2db68586a92abcf03c389eaa3d25dd200a77742b1577838a4c7acddca701377c007db16e85f72c652042010a0e32cc701707e167f2713b1982ed5ef0b343e01ee69ff8a23976544ac84349d8ddc1607231464dcb086ed91c6e5b6428d3ddf375e