ras.cicc.com.cn

- ras.cicc.com.cn -

Issued by GlobalSign Domain Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:2c:1b:b2:3d:27 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

ras.cicc.com.cn

Organization: ras.cicc.com.cn
Organization unit: Domain Control Validated
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Organization unit: Domain Validation CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:2c:1b:b2:3d:27
Serial Number (int): 1208925819615918129560871
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: ea:11:0d:88:66:67:0f:ac:8e:64:a7:b3:c1:7b:3c:18:5d:45:1c:ef
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb

Fingerprint (sha1): eb:59:17:c1:18:1f:63:30:af:e3:25:f9:6d:16:c7:f0:f0:24:f8:57
Fingerprint (sha256): c9:ee:82:8c:09:c0:10:b3:d4:92:b6:54:60:1e:6e:3a:0f:9d:2c:81:f6:42:c0:28:8e:b3:0f:68:7c:2d:56:55

Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crl

Check the revocation status for certificate ras.cicc.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras.cicc.com.cn

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras.cicc.com.cn

Other certificates including the domain name cicc.com.cn

(limited to 100 certificates)
aitest.cicc.com.cn
hkmdm.cicc.com.cn
remotepchw.cicc.com.cn
ecc.cicc.com.cn
cicc.com.cn
jwkh.cicc.com.cn
mx09.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sf.cicc.com.cn
uras.cicc.com.cn
hksfatca.cicc.com.cn
ibanker.dev.cicc.com.cn
mx11.cicc.com.cn
vdi.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
mx10.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cloud.cicc.com.cn
osms.cicc.com.cn
ecrmapp.cicc.com.cn
ecounter.cicc.com.cn
spam05.cicc.com.cn
wecom.cicc.com.cn
cloud.cicc.com.cn
ras.cicc.com.cn
jw.cicc.com.cn
jw.cicc.com.cn
cbeb.cicc.com.cn
ecrmapp.cicc.com.cn
km.cicc.com.cn
mx12.cicc.com.cn
cloud.cicc.com.cn
rms.cicc.com.cn
hcpanywhere.cicc.com.cn
cloud.cicc.com.cn
mx07.cicc.com.cn
sf.cicc.com.cn
ecounter.cicc.com.cn
jwkh.cicc.com.cn
hkm10.cicc.com.cn
sftest.cicc.com.cn
sip.cicc.com.cn
hkmdm.cicc.com.cn
cicc.com.cn
spam04.cicc.com.cn
cloud.cicc.com.cn
visitor.cicc.com.cn
jwkh.cicc.com.cn
jwkh.cicc.com.cn
spam01.cicc.com.cn
lbmam.cicc.com.cn
mx10.cicc.com.cn
mdm.cicc.com.cn
www.cicc.com.cn
cloudapp.cicc.com.cn
wrs.cicc.com.cn
hkfufatca.cicc.com.cn
mx08.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
jw.cicc.com.cn
ecounter.cicc.com.cn
mx12.cicc.com.cn
www.corporate-actions.cicc.com.cn
hkmdm.cicc.com.cn
spam02.cicc.com.cn
ras.cicc.com.cn
mdm.cicc.com.cn
ibuy.cicc.com.cn
cloud.cicc.com.cn
cloud.cicc.com.cn
cbeb.cicc.com.cn
ecounter.cicc.com.cn
cloud.cicc.com.cn
ecrmapp.cicc.com.cn
cbeb.cicc.com.cn
ras.cicc.com.cn
jwkh.cicc.com.cn
sts.cicc.com.cn
spam03.cicc.com.cn
ras.cicc.com.cn
ec.cicc.com.cn
sf.cicc.com.cn
tuoguan.cicc.com.cn
ecrmapp.cicc.com.cn
tuoguan.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
mx08.cicc.com.cn
ecounter.cicc.com.cn
ras.cicc.com.cn
lbmam.cicc.com.cn
remotepc.cicc.com.cn
hkm10.cicc.com.cn
ibphone.cicc.com.cn

Certificate

The complete raw certificate details for ras.cicc.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0wsLwRbXutXqYSCMBJET7JSNh
xtedYVZqsrTpjIzoV7CWmzPmqs42Q262ujOjBt9nEVcmYhs2puJBIPQ2jwN6fdmu
pltXleBHTMrpjFK2O2jDDH6vfydJs0XgJSFpTzzSLo49eZVIRsjH1/ishUbaOCdP
XC+PKJTLtbHJHwlyOQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615918129560871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-05 10:05:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-12-20 10:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.cicc.com.cn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.cicc.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 126934541363168350828979253302167439309825806382246199929300579246710836699494374564705979451330893272402374162840377836466106128571263918547894436857956087031135304406187542773980292139482685217533521795552673377191516051015874025213005764335066322974559760159454624886235012028718665195701317184083297137209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea110d8866670fac8e64a7b3c17b3c185d451cef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.cicc.com.cn'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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