downloads.hotyea.com

Issued by CA 沃通免费SSL证书 G2

About this certificate

This digital certificate with serial number 3f:cc:18:30:36:5a:95:cb:44:dc:b1:df:30:d4:9e:2d was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=downloads.hotyea.com

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:cc:18:30:36:5a:95:cb:44:dc:b1:df:30:d4:9e:2d
Serial Number (int): 84801082891194794390313426611611147821
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 64:17:06:04:2c:b3:8c:6d:90:a3:03:3f:61:94:dd:8f:30:cd:27:9f
AuthorityKeyId: 30:da:74:86:f3:28:90:56:9e:d7:31:31:c2:bd:59:cd:93:12:39:1d

Fingerprint (sha1): a3:b5:f3:3c:81:40:00:d0:0d:e3:a1:3e:8f:65:b0:5d:26:98:c8:69
Fingerprint (sha256): d3:98:95:94:b9:57:38:76:17:e7:88:bf:96:02:ed:7c:b7:d0:ec:d0:51:4f:38:1b:96:c5:a2:72:2a:1b:46:b2

Issuing Certificate URL: http://aia2.wosign.cn/ca2g2.server1.free.cer

Revocation information

OCSP Server: http://ocsp2.wosign.cn/ca2g2/server1/free
CRL Distribution Point: http://crls2.wosign.cn/ca2g2-server1-free.crl

Check the revocation status for certificate downloads.hotyea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downloads.hotyea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

downloads.hotyea.com

Other certificates including the domain name hotyea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for downloads.hotyea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKIU4K2DmlFAYHM7PGfr
ebNeHS1OlAlBLGTSkGkNNPQbo+qCo0RuMkmIDJkiHaeqm0XsRc60CDQD58QiuprA
kvhiBy2o0XtNpzRuqNs2hfntnJXk3X9dRXBFnxjx5VAVd9RWRSz6TPACwVLAdijX
YGzq+n9EvqITgfCsSy/LLcd00ccJOQaV9lDJDQKO5xKfpoR20vhAb9Us1AsJARJQ
A96ac2f5rarAxLmuR2ccuhpVkoi25nJzEcHLqR5OKp/a1I3r5hnd8voqMGCbpIHc
okRBf0bXp7aEAL3avHIljTFNBHf2EoIyp4i58CqxXEe6b+Nr6ELNG1j8HM/SlhNa
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84801082891194794390313426611611147821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA 沃通免费SSL证书 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-28 06:37:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 06:37:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'downloads.hotyea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19773100967502980382448527131617704601431416745671702650399169201927681206474432950883183358894901085346708007245939130713289167017279443505022356122486947117965862866670530938231673860877140193514862527951329562485008100735146123494596818936985291519622423096127166289312942690422388573819411688184600608585870830248400866641821766801832825102007676874601762173901606492811277094866139047483562451457860698362420643815045472777778302304652808889166121859589137365093657544237142060850144855037852907574173516436970225492054304175193396938289928600888626457856859741846918017287490968519426807084528817592534071204509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641706042cb38c6d90a3033f6194dd8f30cd279f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 30da7486f32890569ed73131c2bd59cd9312391d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.wosign.cn/ca2g2/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia2.wosign.cn/ca2g2.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls2.wosign.cn/ca2g2-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.hotyea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.6.1.2.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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