gslbmng.chinacache.net

Issued by 沃通 DV 服务器根证书

About this certificate

This digital certificate with serial number 64:c8:00:3d:b4:4e:bc:83:f1:72:70:df:92:bd:b3:2b was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • RSA: Public exponent SHOULD be in the range between 2^16 + 1 and 2^256 - 1 (BRs: 6.1.6)

Certificate Subject

CN=gslbmng.chinacache.net

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 64:c8:00:3d:b4:4e:bc:83:f1:72:70:df:92:bd:b3:2b
Serial Number (int): 133961263838918954406803797511426126635
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:30:dc:16:d6:fc:d0:d8:e0:b1:2b:15:ef:6c:55:66:3f:1d:78:84
AuthorityKeyId: 32:65:28:32:d6:58:1e:c6:07:bd:a7:e8:f7:28:a9:68:ee:23:a2:15

Fingerprint (sha1): 30:ec:62:62:53:b3:f3:c4:f0:dc:62:c9:ed:51:d5:6d:85:36:3b:c6
Fingerprint (sha256): f7:a9:57:36:f8:18:bd:79:78:7f:2f:c0:89:36:a0:c0:63:06:38:e7:c6:8f:da:bb:40:53:44:19:6e:5b:c6:96

Issuing Certificate URL: http://aia2.wosign.cn/class1.server.ca2.cer

Revocation information

OCSP Server: http://ocsp2.wosign.cn/class1/server/ca2
CRL Distribution Point: http://crls2.wosign.cn/ca2-server-1.crl

Check the revocation status for certificate gslbmng.chinacache.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gslbmng.chinacache.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gslbmng.chinacache.net

Other certificates including the domain name chinacache.net

(limited to 100 certificates)
*.apple.chinacache.net
www.chinacache.net
www.chinacache.net
gslbmng.chinacache.net

Certificate

The complete raw certificate details for gslbmng.chinacache.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAv8pFu4CTqLBNZ9JJoofg
NWDX0PtG6oIMlI5Kjws8Qb9fcfyouzMlREsWvcULZAWL8XP0uuHjyGyC9OWfn5IR
1nmKAGWwUJ/LZ6aNw7//1dkTCSvrtgTI2NP8M6vUPwA1d1ss2Bf5i6Jj8EdOUEZu
4Z6L7hzQjkcJNUHPkQXYCx7UHiiqicg8Y2xPz4KnViVm5xWR/sqWC57rhW7w6mjz
fDnQbzvIvDuvf0kvfzvKl/uqnYMQJ+4Lffeo8OD7E01c0uywNdLv4YAk275ofnZI
xibKKFfVuubW6SCOoJfT4t27cziY10B1dc4uYWtmnJbmzAwDsY2NL/oZB7bVdXJ1
gQIBAw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133961263838918954406803797511426126635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '沃通 DV 服务器根证书'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-22 03:47:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-22 03:47:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gslbmng.chinacache.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2144 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24211260482682457853865383146341804499510715915938631338836523011624106681992171724499342236398812451699083783033060564742954258202842478541343700795416580090135203522528755664351373049897229439930156732641309726432554023290352424835617172918308504383926757198243692555904229279029946500126521764973687566385901774373820052795827824588827815207029691012877795654400199595052529977359152812300104355739417869874929273637131223387214080910387094296389090872053295440965504946375754422227509801505169987930820515458990640330124022192935853206307736045600682882188697735939347238055060846127662473343988975853188511069569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b30dc16d6fcd0d8e0b12b15ef6c55663f1d7884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 32652832d6581ec607bda7e8f728a968ee23a215
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.wosign.cn/class1/server/ca2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia2.wosign.cn/class1.server.ca2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls2.wosign.cn/ca2-server-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gslbmng.chinacache.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.3.1.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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