api.rong-data.com

- 上海荣数信息技术有限公司 -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 75:75:96:f7:3e:8a:2a:0d:cd:31:01:87 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

上海荣数信息技术有限公司

Organization: 上海荣数信息技术有限公司
State / Province: 上海
Locality: 上海
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 75:75:96:f7:3e:8a:2a:0d:cd:31:01:87
Serial Number (int): 36351903385816961923184394631
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8d:df:7d:32:69:07:bb:d7:56:26:ad:24:ac:88:11:b8:ae:c8:03:77
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 88:fe:d2:a9:ab:9b:fb:f3:af:b4:da:b0:73:39:f9:7b:d4:b6:0c:65
Fingerprint (sha256): e5:a5:1f:ec:6e:69:c0:37:c3:31:1d:98:25:7c:7f:94:ab:5a:73:72:58:13:9d:da:3e:28:ca:97:ed:25:b0:c5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate api.rong-data.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.rong-data.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.rong-data.com
api.rs-ibg.com

Other certificates including the domain name rong-data.com

(limited to 100 certificates)
resource.leagcard.com
mall.rong-data.com
resource.leagcard.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
web.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
mall.rong-data.com
www.rong-data.com
resource.leagcard.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
web.rong-data.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
web.rong-data.com
api.rong-data.com
webrtc.rong-data.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
mall.rong-data.com
resource.leagcard.com
resource.leagcard.com
*.leagcard.com
mall.rong-data.com
*.leagcard.com
mall.rong-data.com
api.rong-data.com
web.rong-data.com
resource.leagcard.com
resource.leagcard.com
mall.rong-data.com
webrtc.rong-data.com

Certificate

The complete raw certificate details for api.rong-data.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuknbRljnXT6l4BKgTMHR
8HJ50I7KE9km3d1pZEUxmLXwI06AaCkkgVJSTbIn60nLjuy9CJlrq364eRDMokqZ
6rATP3Xs3REQAgKWKmfc8CNhvga0rs3kmoHc2cH98SA7/CXdI5QRd4hr0r0/SKgt
MDXFiJmms8blRtv7O7aOEXzxClbt6/6mP3U/a6cmmdz2VSVpHDrGK2hV/Oi/ZhT0
JvZOnNLgGoeyAR1K11tB9yzz+s+0KLhSOeO+Iiff911lJW14lQNiHMnJsFh9TvU9
Bi5iNdtufsPnP1mIFCCNUNSAMHxuxcdKtrKQYx9lVrRh2YpHRX9ShMlrYU2WW8nc
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36351903385816961923184394631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 08:37:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-06 08:37:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海荣数信息技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.rong-data.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23516744742020798117958139161654883745087641352290981774578295498284762192239240937472267923000605140442753200167047434517609395442893978953614946228728352859158095785838940058591259916214690682923995684471250395135604282100628452873962980174292638009504563595540649327416234847589137317341246622987688025316090061090383317809445717242990377836652598847312682045817767462414688684179713069250189782293350833422436551637257867314831449973042934492515775923395633458131430995866230414349021522294596099202700911428276139535723844007070863828654368454043483900780693101026655516401150805336515740964094468749648888192153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rong-data.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rs-ibg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ddf7d326907bbd75626ad24ac8811b8aec80377
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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