bbs.hotyea.com

Issued by CA 沃通免费SSL证书

About this certificate

This digital certificate with serial number 1e:fc:5f:ad:79:4b:b5:ca:8f:a9:02:95:35:4c:04:59 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Certificate Subject

CN=bbs.hotyea.com,2.5.4.13=#0c35e5858de8b4b953534ce8af81e4b9a620e794b3e8afb7e7bd91e59d80efbc9a68747470733a2f2f6275792e776f7369676e2e636f6d

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:fc:5f:ad:79:4b:b5:ca:8f:a9:02:95:35:4c:04:59
Serial Number (int): 41187239254821928735705936412619310169
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: fa:97:13:b2:e2:75:01:49:b8:6e:be:34:9b:69:e9:34:a7:78:23:d2
AuthorityKeyId: fd:c3:ae:11:d7:e5:c8:e5:d4:34:41:aa:41:0d:28:29:dc:0b:f7:3e

Fingerprint (sha1): 38:87:bf:e5:a3:4e:75:90:29:fb:3b:84:c8:bb:40:b4:4e:c6:a9:77
Fingerprint (sha256): f3:0b:66:8c:69:84:b7:a9:17:da:bb:7b:f9:26:56:4d:02:0a:14:b5:53:06:09:7b:3a:7b:f1:88:48:60:d1:f7

Issuing Certificate URL: http://aia2.wosign.cn/ca2.server1.free.cer

Revocation information

OCSP Server: http://ocsp2.wosign.cn/ca2/server1/free
CRL Distribution Point: http://crls2.wosign.cn/ca2-server1-free.crl

Check the revocation status for certificate bbs.hotyea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbs.hotyea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbs.hotyea.com

Other certificates including the domain name hotyea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bbs.hotyea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIQHvxfrXlLtcqPqQKVNUwEWTANBgkqhkiG9w0BAQUFADBM
MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxITAfBgNV
BAMMGENBIOayg+mAmuWFjei0uVNTTOivgeS5pjAeFw0xNTAxMjAxNDM0MzlaFw0x
NjAxMjAxNDM0MzlaMFkxPjA8BgNVBA0MNeWFjei0uVNTTOivgeS5piDnlLPor7fn
vZHlnYDvvJpodHRwczovL2J1eS53b3NpZ24uY29tMRcwFQYDVQQDDA5iYnMuaG90
eWVhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKfmnP5jqxPI
Xnt2+QHDJ+qDbR73aOzU5cJT9Y8n/OEMvuzrLEgld6xvq8WKyjCQGVyA60DMUdA0
1BGq0MWgS0AwtHEpwQ6CBnlIywOwxCQE6w0gonX2au4IBmkvwSZeANCymqd/bS5i
B3rkDohZ9NlAQigV6SpsEQ6EE3I+z54IikRh6l7xZfP4KVtNja0DKbN/Ou3DViWS
m1EczHE647fu2XJhTZV6KI+xAD0dJkZ+R9Rq5W6fHVQi5BecoYG7FAJkZtIWkad2
uqqxRnSXrc9fW4Z5yiZvNSuuUqBhZjGFdasWtApwhp4Kkat7KogqNv9HJ3ej9Qza
T77mxoz9SK8CAwEAAaOCAaUwggGhMAsGA1UdDwQEAwIDqDAdBgNVHSUEFjAUBggr
BgEFBQcDAgYIKwYBBQUHAwEwCQYDVR0TBAIwADAdBgNVHQ4EFgQU+pcTsuJ1AUm4
br40m2npNKd4I9IwHwYDVR0jBBgwFoAU/cOuEdflyOXUNEGqQQ0oKdwL9z4wewYI
KwYBBQUHAQEEbzBtMDMGCCsGAQUFBzABhidodHRwOi8vb2NzcDIud29zaWduLmNu
L2NhMi9zZXJ2ZXIxL2ZyZWUwNgYIKwYBBQUHMAKGKmh0dHA6Ly9haWEyLndvc2ln
bi5jbi9jYTIuc2VydmVyMS5mcmVlLmNlcjA8BgNVHR8ENTAzMDGgL6AthitodHRw
Oi8vY3JsczIud29zaWduLmNuL2NhMi1zZXJ2ZXIxLWZyZWUuY3JsMBkGA1UdEQQS
MBCCDmJicy5ob3R5ZWEuY29tMFIGA1UdIARLMEkwCAYGZ4EMAQIBMD0GDisGAQQB
gptRAwECBwECMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cud29zaWduLmNvbS9w
b2xpY3kvMA0GCSqGSIb3DQEBBQUAA4IBAQAPAzIFUj5YtWDPJX948tycDNbGyvGm
f8tnhHqQ33EuZ2O7m1edyh6NGYCE4B5LZtzh5HdT6RpxyFQ+zr2kO7KLL1Q84bER
yc0I5g5ht8VMd9ymyrs+CbY0MV+mjbrFKkZcMZL1lWdTEL/FxQ6pevwcJx6v783F
LgIfMx9eU7BmjmeoKKg5o8YU00c8c/xyXZiWtQwuTC9KS42lPaoIV6bVrOF3C+XJ
oeotEKR5D8Biz8l+on1BDUEZi0CjFy2o7cjMGw4pnXGMnvkJcyz6si5VED0iz5gw
B+XCDWFbEa4TG/Av7DITwx/cgpT/xz/s4IKRt3jVGydFatL1SkLfGtkO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ac/mOrE8hee3b5AcMn
6oNtHvdo7NTlwlP1jyf84Qy+7OssSCV3rG+rxYrKMJAZXIDrQMxR0DTUEarQxaBL
QDC0cSnBDoIGeUjLA7DEJATrDSCidfZq7ggGaS/BJl4A0LKap39tLmIHeuQOiFn0
2UBCKBXpKmwRDoQTcj7PngiKRGHqXvFl8/gpW02NrQMps3867cNWJZKbURzMcTrj
t+7ZcmFNlXooj7EAPR0mRn5H1Grlbp8dVCLkF5yhgbsUAmRm0haRp3a6qrFGdJet
z19bhnnKJm81K65SoGFmMYV1qxa0CnCGngqRq3sqiCo2/0cnd6P1DNpPvubGjP1I
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41187239254821928735705936412619310169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA 沃通免费SSL证书'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-20 14:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-20 14:34:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.13 (description)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '免费SSL证书 申请网址:https://buy.wosign.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bbs.hotyea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21195516564586151192128373313272608062674625601399581769741146532078297805989511427460638888195650333914482755834317107744315200505514850254118431965608168026165901769673399795360214694134030340228017095244973907540668494054786765450812078284068818585248712884008558123889543509710770291810657621888025016352644068296216876658836715137929515014670617188148361959288091032813549827888268767629844209061434510803876266615239866353855127948482412669599241403842735894949074481159938802008273339058883320628912731538222573880237682184215972889128183428430697909441866986331260522674228890969326982945403663315315994740911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa9713b2e2750149b86ebe349b69e934a77823d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdc3ae11d7e5c8e5d43441aa410d2829dc0bf73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.wosign.cn/ca2/server1/free'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia2.wosign.cn/ca2.server1.free.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls2.wosign.cn/ca2-server1-free.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbs.hotyea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.3.1.2.7.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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