DNS
SSL certificate
TLSv1.3cernet.edu.cn · 202.205.109.203:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=*.cernet.edu.cn
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
- Valid from
- 2026-09-28T00:00:00+00:00
- Expires
- 2027-04-14T23:59:59+00:00
- Days remaining
- 198
- Serial (hex)
- 014E1A13A0553F9D17CC0709A9EC1230
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:*.cernet.edu.cn, DNS:cernet.edu.cn
SHA-256 fingerprint
16:F2:E3:B2:AE:21:AA:08:C2:66:32:E0:31:14:37:B7:4C:FD:30:39:2D:77:CD:80:B8:18:71:6D:E3:7A:62:45
Certificate extensions & PEM
- authorityKeyIdentifier
- 94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
- subjectKeyIdentifier
- 90:29:07:A2:9E:3E:38:13:F5:F5:25:77:1B:A0:5E:DD:98:49:FA:39
- subjectAltName
- DNS:*.cernet.edu.cn, DNS:cernet.edu.cn
- certificatePolicies
- Policy: 2.23.140.1.2.1 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
- authorityInfoAccess
- OCSP - URI:http://status.geotrust.com CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 28 02:00:28.894 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:0E:9F:DA:A1:10:93:46:3C:DD:56:F0:8C: 07:CC:C9:47:67:80:B9:6A:5D:EB:70:C1:07:B9:0F:70: 7A:3C:50:C4:02:20:2C:05:72:DF:F3:1F:F0:FE:C3:23: 87:08:0E:B0:B8:FF:D0:E7:B1:2F:AA:75:F0:51:27:EF: E9:B6:9D:03:2B:DB Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Sep 28 02:00:29.042 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:34:80:42:A0:26:56:29:E5:37:68:CB:96: 0C:EC:92:2C:DC:56:BA:DC:A3:F3:FB:1C:32:09:65:EE: 0C:52:5A:8F:02:20:63:FB:AB:D3:C3:FA:6C:75:CA:44: 23:A3:12:FE:D5:63:94:29:E0:F0:E1:83:14:76:01:2E: D2:D3:65:DE:DB:F7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 28 02:00:29.109 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:64:E5:05:08:C1:3F:15:1C:C8:58:D2:43: 5D:4A:F6:E3:BD:08:2C:94:B4:CB:6A:B4:B0:7E:79:C1: D3:F1:80:25:02:20:3B:0B:BB:0D:28:BB:53:2A:EF:B8: 3C:5A:1C:81:77:A4:03:9E:45:70:86:C4:75:1C:56:95: 82:29:0B:37:09:70
-----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIQAU4aE6BVP50XzAcJqewSMDANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTI2MDkyODAwMDAwMFoXDTI3MDQxNDIzNTk1OVowGjEYMBYGA1UEAwwPKi5j ZXJuZXQuZWR1LmNuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8u+B 6dWXpAx0yy61HAKZjmyAw/I3RJUw/d+LHYbkiCt2neT+TZrv5pJMzTdLVaQ94yQL T+PDWQFjEMIwYpppg7II30dBlnwz9LT9EcstUEiqnrETJyibcm/vJcjKP8jYkkGC dqLYGIA5DJ2A0CzfNB4u1Et8YLMaQyozd7TTZnHR51QDS/ULHOArQr3/rKhBjRpr HEtN8AZwkROJ1iPHRA8SeUtfXkUYwbtMahKV6IQQlKTujggpHgB4Sa6z+FvmlDoZ RP9+9ri5c5bNFFO8mYm/8JqdaFz0eDCAJoEhNYpeMR6/GECq+4K7/tSBUvp8kIiU ZaEa7ylK66HXJSneCQIDAQABo4IDGjCCAxYwHwYDVR0jBBgwFoAUlE/UXYvkpOKm gP792PkA76O+AlcwHQYDVR0OBBYEFJApB6KePjgT9fUldxugXt2YSfo5MCkGA1Ud EQQiMCCCDyouY2VybmV0LmVkdS5jboINY2VybmV0LmVkdS5jbjA+BgNVHSAENzA1 MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMD8GA1Ud HwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExT UlNBQ0FHMS5jcmwwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8v c3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMu Z2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/BAIw ADCCAXsGCisGAQQB1nkCBAIEggFrBIIBZwFlAHUATGPcmOWcHauI9h6KPd6uj6tE ozd7X5uUw/uhnPzBviYAAAGg5b393gAABAMARjBEAiAOn9qhEJNGPN1W8IwHzMlH Z4C5al3rcMEHuQ9wejxQxAIgLAVy3/Mf8P7DI4cIDrC4/9DnsS+qdfBRJ+/ptp0D K9sAdQDW1Y2p0BdT82pKoMdXSQKv68fcLNOM2fdkyAyJGR6fAgAAAaDlvf5yAAAE AwBGMEQCIDSAQqAmVinlN2jLlgzskizcVrrco/P7HDIJZe4MUlqPAiBj+6vTw/ps dcpEI6MS/tVjlCng8OGDFHYBLtLTZd7b9wB1AByfaCzp+vBFaVD4G5aKh93bMhDY TObIsuOCUkrEz1mfAAABoOW9/rUAAAQDAEYwRAIgZOUFCME/FRzIWNJDXUr2470I LJS0y2q0sH55wdPxgCUCIDsLuw0ou1Mq77g8WhyBd6QDnkVwhsR1HFaVgikLNwlw MA0GCSqGSIb3DQEBCwUAA4IBAQCTfvtnh3MyRBJf3X+GAMJgc8baPrCwAE7Pj6qf nncpdEMxo1/IB60pg6XNOYd+NtRKaL+agsemmQymQswMEMZIUYS5VM4GHR6Z5rDJ Oz4CaJBBeXbPm4FCBLNFY/+eR72J2AoYY0RwFXBuXhnUpYyHq/EwW1x0UNouEa+t 6/VSActlK2EFI3UdvyslaVEqFk+x2AgGmtzw1dGpJ65S3S/j8vDs+EAG+3Iq2Zfh mzcSqrcQbccMChQej137NYhbml9nTpPLp2sqd/H+BD+Rt2sCIW+3X5PJ0fGrcXdw GuCOafPatLFK8avxQ8DTVm5K/POtgL0MshFsPZfUboq/pkVX -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-28T09:27:00+00:00
Server-presented chain · 1 additional certificate
Chain certificate 1
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=GeoTrust TLS RSA CA G1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2017-11-02T12:23:37+00:00
- Expires
- 2027-11-02T12:23:37+00:00
- Days remaining
- 400
- Serial (hex)
- 0D07782A133FC6F9A57296E131FFD179
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
C0:6E:30:7F:7C:FC:1D:32:FA:72:A4:C0:33:C8:7B:90:01:9A:F2:16:F0:77:5D:64:97:8A:2E:CA:6C:8A:23:0E
Certificate extensions & PEM
- subjectKeyIdentifier
- 94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS
-----BEGIN CERTIFICATE----- MIIEjTCCA3WgAwIBAgIQDQd4KhM/xvmlcpbhMf/ReTANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjIzMzdaFw0yNzExMDIxMjIzMzdaMGAxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHzAdBgNVBAMTFkdlb1RydXN0IFRMUyBSU0EgQ0EgRzEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC+F+jsvikKy/65LWEx/TMkCDIuWegh1Ngwvm4Q yISgP7oU5d79eoySG3vOhC3w/3jEMuipoH1fBtp7m0tTpsYbAhch4XA7rfuD6whU gajeErLVxoiWMPkC/DnUvbgi74BJmdBiuGHQSd7LwsuXpTEGG9fYXcbTVN5SATYq DfbexbYxTMwVJWoVb6lrBEgM3gBBqiiAiy800xu1Nq07JdCIQkBsNpFtZbIZhsDS fzlGWP4wEmBQ3O67c+ZXkFr2DcrXBEtHam80Gp2SNhou2U5U7UesDL/xgLK6/0d7 6TnEVMSUVJkZ8VeZr+IUIlvoLrtjLbqugb0T3OYXW+CQU0kBAgMBAAGjggFAMIIB PDAdBgNVHQ4EFgQUlE/UXYvkpOKmgP792PkA76O+AlcwHwYDVR0jBBgwFoAUTiJU IBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGCCsGAQUFBwEB BCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEIGA1Ud HwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds b2JhbFJvb3RHMi5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEB AIIcBDqC6cWpyGUSXAjjAcYwsK4iiGF7KweG97i1RJz1kwZhRoo6orU1JtBYnjzB c4+/sXmnHJk3mlPyL1xuIAt9sMeC7+vreRIF5wFBC0MCN5sbHwhNN1JzKbifNeP5 ozpZdQFmkCo+neBiKR6HqIA+LMTMCMMuv2khGGuPHmtDze4GmEGZtYLyF8EQpa5Y jPuV6k2Cr/N3XxFpT3hRpt/3usU/Zb9wfKPtWpoznZ4/44c1p9rzFcZYrWkj3A+7 TNBJE0GmP2fhXhP1D/XVfIW/h0yCJGEiV9Glm/uGOa3DXHlmbAcxSyCRraG+ZBkA 7h4SeM6Y8l/7MBRpPCz6l8Y= -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.