*.oos-cn-180622.ctyunapi.cn

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 44:21:48:3e:b8:f9:f9:17:04:a8:d6:1e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.oos-cn-180622.ctyunapi.cn

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 44:21:48:3e:b8:f9:f9:17:04:a8:d6:1e
Serial Number (int): 21085216387312605069935433246
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 37:9e:3f:be:f7:57:03:02:0c:2a:97:61:9b:56:4c:75:89:61:ce:78
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): e9:01:cc:4b:1e:81:3c:16:7b:00:c1:c4:b5:e2:70:e8:4c:2c:58:b5
Fingerprint (sha256): d8:ea:d6:94:bf:df:18:a2:9d:18:38:c4:d8:f2:ad:4a:47:ec:f2:0c:55:9d:c7:db:c4:f9:12:3a:e6:fd:c2:2e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate *.oos-cn-180622.ctyunapi.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oos-cn-180622.ctyunapi.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.oos-cn-180622.ctyunapi.cn
oos-cn-180622.ctyunapi.cn

Other certificates including the domain name ctyunapi.cn

(limited to 100 certificates)
*.oos-hz.ctyunapi.cn
*.oos-hbwh.ctyunapi.cn
*.oos-ahwh.ctyunapi.cn
*.oos-js.ctyunapi.cn
*.oos-cn-cloudtrail.ctyunapi.cn
*.oos-hq-bjsh.ctyunapi.cn
*.oos-jsnj.ctyunapi.cn
*.oos-snxa.ctyunapi.cn
*.oos-nm.ctyunapi.cn
*.oos-bj2.ctyunapi.cn
*.oos-jscz.ctyunapi.cn
*.oos-hesjz.ctyunapi.cn
*.oos-cn-180622.ctyunapi.cn
*.oos.ctyunapi.cn
*.oos-gzgy.ctyunapi.cn
*.oos-b-220615.ctyunapi.cn
*.oos-xjwlmq.ctyunapi.cn
*.oos-hq-bj.ctyunapi.cn
*.oos-gz.ctyunapi.cn
*.oos-cn.ctyunapi.cn
*.oos-cn-180622.ctyunapi.cn
*.oos-xjwlmq.ctyunapi.cn
*.oos-ahwh.ctyunapi.cn
*.oos-ahwh.ctyunapi.cn
*.oos-gz.ctyunapi.cn
*.oos-ahwh.ctyunapi.cn
*.oos-hq-sh.ctyunapi.cn
*.oos-hesjz.ctyunapi.cn
*.ctyunapi.cn
*.oos-xzls.ctyunapi.cn
*.oos-hazz.ctyunapi.cn
*.oos-hbwh.ctyunapi.cn
*.oos-hbwh.ctyunapi.cn
*.oos-bj2.ctyunapi.cn
*.oos-sccd.ctyunapi.cn
*.oos.ctyunapi.cn
*.oos-xjwlmq.ctyunapi.cn
*.oos-sh2.ctyunapi.cn
*.oos-cd.ctyunapi.cn
*.oos-cn-180622.ctyunapi.cn
*.oos-nm2.ctyunapi.cn
*.oos-nm2.ctyunapi.cn
*.oos-hazz.ctyunapi.cn
*.oos-jsnt.ctyunapi.cn
*.oos-sh.ctyunapi.cn
*.oos-gzgy.ctyunapi.cn
*.oos-lnsy.ctyunapi.cn
*.oos-nm.ctyunapi.cn
*.oos-bj2.ctyunapi.cn
*.oos-sh.ctyunapi.cn
*.oos-zjjh.ctyunapi.cn
*.ctyunapi.cn
*.oos-gslz.ctyunapi.cn
*.oos-jssz.ctyunapi.cn
*.oos-sccd.ctyunapi.cn
*.oos-gz.ctyunapi.cn
*.oos-snxa.ctyunapi.cn
*.oos-jsnt.ctyunapi.cn
*.oos-cn-180622.ctyunapi.cn
*.oos.ctyunapi.cn
*.oos-js.ctyunapi.cn
*.oos-hbwh.ctyunapi.cn
*.oos-lnsy.ctyunapi.cn
*.oos-xzls.ctyunapi.cn
*.oos-snxa.ctyunapi.cn
*.oos-hncs.ctyunapi.cn
*.oos-sccd.ctyunapi.cn
*.oos-hncs.ctyunapi.cn
*.oos-nm.ctyunapi.cn
*.oos-js.ctyunapi.cn
*.oos-nm2.ctyunapi.cn
*.oos-jsnt.ctyunapi.cn
*.oos-hihk.ctyunapi.cn
*.oos-lnsy.ctyunapi.cn
*.oos-sh.ctyunapi.cn
*.oos-jsnt.ctyunapi.cn
*.oos-gdsz.ctyunapi.cn
*.oos-jssz.ctyunapi.cn
*.oos-cn-180622.ctyunapi.cn
*.oos-jscz.ctyunapi.cn
*.oos-xjwlmq.ctyunapi.cn
*.oos-zjjh.ctyunapi.cn
*.oos-hz.ctyunapi.cn
*.oos-jsnj.ctyunapi.cn
*.ctyunapi.cn
*.oos-gslz.ctyunapi.cn
*.oos-sdqd.ctyunapi.cn
*.oos-snxa.ctyunapi.cn
*.oos-bj2.ctyunapi.cn
*.oos-hazz.ctyunapi.cn
*.oos-xiongan.ctyunapi.cn
*.oos-gdsz.ctyunapi.cn
*.oos-gzgy.ctyunapi.cn
*.oos-lnsy.ctyunapi.cn
*.oos-fj.ctyunapi.cn
*.oos-hq-bjsh.ctyunapi.cn
*.oos-nm.ctyunapi.cn
*.oos-zjjh.ctyunapi.cn
*.oos-gz.ctyunapi.cn
*.oos-js.ctyunapi.cn

Certificate

The complete raw certificate details for *.oos-cn-180622.ctyunapi.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv61LcVr4L8/Leo5vbVan
AtiDjkiKlawSC/4FHrAs6mAXVh6ypjDwa175ZsdwVMqFVeZVj85bmVrzYtJcoFpZ
BtsBqYgutll0m+/Al1Yp0m/gnZpwTOgJhnIgL3ecKwj6YpRxhTAT9OFPP8QWZ8y/
p/9X69wFfBxoGOftX/UltWIdlxoE37WH+c8/gADBah8r0L5Tq86ra6ZMc0SZ8Exs
79NSc4jDPFXZMnYurJyxjnS04P4hoUpD7CenJXi2m8oUAd4YlcmWVqtpc/JWjD42
gypPOeUdvQV/KklGLx6hY42HuZydBLsEJeh6IOAxHshActQvYJSbB/IbSsMgt43d
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21085216387312605069935433246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 08:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 08:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oos-cn-180622.ctyunapi.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24196971049249854384434255181910480207162325886805477071170562079289484921070442980649335773104499654821420053118671609013307491271485900202601264949327864487771544795584643929083898359126579270271122470453950742709334322127524185438428935531547120365435621798295587280291754970916290763950036815200554246735931996478604047246695610803398004469061793594949451476405301836409438424917476764485200100147016048372972643328349214676026637333769358020872607202085398809941458623482263756150158817525868061471905293852083733163658826785149071480181985515942021660919732935628450570655072192309548587551151190323017961823497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oos-cn-180622.ctyunapi.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos-cn-180622.ctyunapi.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							379e3fbef75703020c2a97619b564c758961ce78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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