cdn02.c3edge.net

- ChinaCache North America -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:f7:76 was issued on by GeoTrust, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ChinaCache North America

Company registration number: vCv41UjLW6hpDceFciYSEBKOb0H5SYHP
Organization: ChinaCache North America
Organization unit: CDN
State / Province: California
Locality: Diamond Bar
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f7:76
Serial Number (int): 128886
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 5b:9c:8a:8d:9f:3e:8a:6a:46:b6:87:16:4b:01:ab:9d:dd:2b:be:c5
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 44:4d:b9:91:fa:de:81:19:fe:a2:94:b0:a2:8f:c5:4d:14:6f:15:46
Fingerprint (sha256): b4:6f:0c:37:d8:5a:86:e4:67:20:4b:84:f0:11:89:5d:ed:85:cd:c3:91:6b:1e:c4:8a:8e:29:27:c0:6d:c9:ea

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate cdn02.c3edge.net

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn02.c3edge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kufa88-payment.c3edge.net
englishcentral1.c3edge.net
englishcentral2.c3edge.net
englishcentral3.c3edge.net
www.mouser.cn
cn.mouser.com
intsig.net
intsig.com
static2.intsig.net
static.intsig.net
static.intsig.com
flowershop-fb.shinezone.com
xmos.c3edge.net
china.nuskin.c3edge.net
author.nuskin.c3edge.net
cdn02.c3edge.net

Other certificates including the domain name c3edge.net

(limited to 100 certificates)
cdn03.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn.c3edge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn03.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn02.c3edge.net
cdn02.c3edge.net
cdn01.ccedge.net
munin.orca.c3edge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn03.c3edge.net
cdn01.ccedge.net

Certificate

The complete raw certificate details for cdn02.c3edge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhb44B11ROYqgVXq8xSc
WrgFh6fagfHU1T9/IVeR6r/NkL/CfPbRU+gc3dbJPNSuCxxO9pNa9aZWhD4fNS4G
MlvS94Ema2PF00hemGqkSD7B41+IwyCa0ohGUlXhXOnVak9zHte/J2D+5xb9pWj9
cjnuW7IPLtN1RL31602CvZchRgfUg+UFJeV2jQRAx9I0xEj79x6LiFnLgsw9qcAK
Op+ISdp2k2JvhkGBLBLA8kkSdt8w4++M5vrycmLfBDd/qIkKU+1n4arESAP0DRWf
EznKLsOZk8lIh2jhqFfsBv4p3sRNg2x70GiwwWY0vbXZ1EEs+ElulD65YvSCE5sw
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-23 06:32:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-28 08:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vCv41UjLW6hpDceFciYSEBKOb0H5SYHP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diamond Bar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ChinaCache North America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn02.c3edge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24501559162506875329152626427706983779368094839145901910513978793504711125520053732657726764436586005348412587450683356193507544833726320153128957502698210164042811172317421534869194117368698029768384173747272339238105702749953576911677210865526845233419543364096801818131023935510705342071236297544373580803556018007505904825760029040805903671595019398838369760661439672135342448781777968567380744564881833878435883899075583316663194763417877908472035481405203826801927901492439678489483998558511039885347293540475246131923186360955733355587988583111346636236285102551699066918164483706319947024798415920918869782783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kufa88-payment.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishcentral1.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishcentral2.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishcentral3.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mouser.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.mouser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.intsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.intsig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.intsig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowershop-fb.shinezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmos.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.nuskin.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author.nuskin.c3edge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn02.c3edge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b9c8a8d9f3e8a6a46b687164b01ab9ddd2bbec5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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