zstatic-net，net::ERR_CERT_INVALID，火绒加密扫描错误，不输出 CN 但 SANs 正常

3306-1

来源：https://www.zstatic.net
　　　https://msdn.itellyou.cn
　　　https://www.ithome.com/zt/xijiayi
用途：前端公共资源库
抄送：@火绒工程师
备注：此域下火绒替换证书异常，不输出 Subject／Primary Domain (CN)

域　名　zstatic[.]net
注册商　Alibaba Cloud Computing Ltd. d/b/a HiChina
注册人　546L5a2Q6Ze7
邮　箱
省／州　河南
地　区　中国（CN）
许可号　京ICP备2023007558号
注册日　2023-06-06 14:06:14 UTC+8
过期日　2032-06-06 14:06:14 UTC+8
更新日　2026-04-20 14:19:49 UTC+8
通过日　2023-12-22
IANA_ID　1599
状　态　客户端禁止转移
　　　　客户端禁止更新
DNS　　gns1[.]huaweicloud-dns[.]cn
　　　　gns2[.]huaweicloud-dns[.]cn
　　　　ns1[.]huaweicloud-dns[.]com
　　　　ns2[.]huaweicloud-dns[.]com
DNSSEC　已配置

火绒扫描（我自己的本地扫描结果）
6.0.11.2 版本
08-20 20:20 病毒库

2026/08/04 22:31:03
至
2026/08/20 21:32:42
病毒防护
WEB扫描
发生扫描错误【s4[,]zstatic[.]net】，已忽略

发生扫描错误
网站：s4[,]zstatic[.]net
操作结果：已忽略

发生扫描错误时处理方式
扫描加密连接过程中将使用火绒 SSL 证书替换原来的 SSL 证书，可能导致部分软件访问网址发生错误
Ｏ　询问我

网站自述

1. https://github.com/zstaticcdn/zstaticcdn
   
2. 
   
3. 静态资源 ZStatic.net 是专业的前端公共资源服务，为您提供稳定、安全、快速的 CSS、JS 等文件分发。

复制代码

测试版本

1. １５１

复制代码

报错代码

1. net::ERR_CERT_INVALID

复制代码

简易描述

1. 你的连接不是专用连接
   
2. 攻击者可能试图从 s4.zstatic.net 窃取你的信息(例如，密码、消息或信用卡)。

复制代码

高级描述

1. s4.zstatic.net 使用加密来保护你的信息。这次，当 Chromium 尝试连接到 s4.zstatic.net 时，网站发回了不正常和不正确的凭据。如果攻击者尝试假冒 s4.zstatic.net，或者 WLAN 登录屏幕已中断连接，则可能会发生这种情况。你的信息仍然安全，因为在交换任何数据之前，Chromium 停止了连接。
   
2. 
   
3. 你现在无法访问 s4.zstatic.net，因为网站发送了 Chromium 无法处理的杂乱凭据。网络错误和攻击通常是暂时的，因此该页面以后可能会恢复正常。

复制代码

详细描述

1. 颁发给
   
2. 公用名(CN)
   
3. <不是证书的一部分>
   
4. 
   
5. 组织(O)
   
6. <不是证书的一部分>
   
7. 
   
8. 组织单位(OU)
   
9. <不是证书的一部分>
   
10. 
    
11. 颁发者
    
12. 公用名(CN)
    
13. Huorong Anti-Virus Personal Root Certificate
    
14. 
    
15. 组织(0)
    
16. Beijing Huorong Network Technology Co., Ltd.
    
17. 
    
18. 组织单位(OU)
    
19. <不是证书的一部分>
    
20. 
    
21. 有效期
    
22. 颁发日期
    
23. 2016年8月22日星期一 21:32:37
    
24. 
    
25. 到期日期
    
26. 2036年8月17日星期日 21:32:37
    
27. 
    
28. SHA-256 指纹
    
29. 证书
    
30. 84b6ec8739944cebae0b98816a9b2962b608563e6fb9977c9a934d9023dd19f2
    
31. 
    
32. 公钥c
    
33. f8b9011893f3f33f895bb85cdac099e75576d1ed10533351c896f9437d8eb388
    
34. 
    
35. 证书层次结构
    
36. *.zstatic,net

复制代码

证书详情

1. Subject:
   
2. 
   
3. Issuer: Huorong Anti-Virus Personal Root Certificate
   
4. 
   
5. Expires on: 2036年8月17日
   
6. 
   
7. Current date: 2026年8月20日
   
8. 
   
9. PEM encoded chain:
   
10. -----BEGIN CERTIFICATE-----
    
11. MIIDfTCCAmWgAwIBAgISBRrbBF8thqNb7ktmMvBV15dWMA0GCSqGSIb3DQEBCwUA
    
12. MIGVMTUwMwYDVQQDDCxIdW9yb25nIEFudGktVmlydXMgUGVyc29uYWwgUm9vdCBD
    
13. ZXJ0aWZpY2F0ZTELMAkGA1UEBhMCQ04xCzAJBgNVBAcMAkJKMQswCQYDVQQIDAJC
    
14. SjE1MDMGA1UECgwsQmVpamluZyBIdW9yb25nIE5ldHdvcmsgVGVjaG5vbG9neSBD
    
15. by4sIEx0ZC4wHhcNMTYwODIyMTMzMjM3WhcNMzYwODE3MTMzMjM3WjAAMIIBIjAN
    
16. BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdOL1GWG0N2tFWOaEQ5Wt3ju36eZ
    
17. jBrfm7PSsUo3x5IL95sGW3vA+FIjeGQA2WtWecLaO9QBNdDZOrs7rEOJvkRC9yuT
    
18. e3qYeheEhkj90mXqx9GfiN8FsCyB4gJ9VNtxjgcUArA4bgsoxpJLXS8AOgfY4Bxv
    
19. AoZW5/TBwL63Ab4tvIA3ejn0kXSwkhUHEri0e9ZldCJpBnzFW/LgLL3C4PBTALjd
    
20. gY1nsLfCo5CPHLyRMzSBCi7jeAnHg/5DTbwN7s+2XqnAyURX56mxRi6dlA+K6znm
    
21. R2Zn5XFy5chHQNye6x6588irjhUiBmKnxHnfOtGiJVsAupXRE2jHqbV2hwIDAQAB
    
22. o1swWTALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwNQYDVR0RBC4w
    
23. LIINKi56c3RhdGljLm5ldIILenN0YXRpYy5uZXSCDnM0LnpzdGF0aWMubmV0MA0G
    
24. CSqGSIb3DQEBCwUAA4IBAQAQhp2RG19Q0N/9gH+i5dTGIGbizWUFXm4JRugbQfaX
    
25. t/QpMu7gr+q86JYKAnDtd8BySkbyAlibd///oXNFWlZeQyXBiFH6tCvTAcQz0OAC
    
26. b7lF5QN2ECbY7Yh3jPy53M4/gQ5LASveJkhxaQ8B9yZNGWpdCFJlnOFBYKwhz8I5
    
27. VIDQAla7nTGQXRzltWXJth2BRZmmzml1Z2sAU2cS0HbSfLL+aepJVAkWTNMKBotG
    
28. Mg2u5gr2pIX8HbrzmfAYndwhNttkvpyz8jM0qf5z5sfqIbZI+ziOXhCB6LNMTUwd
    
29. /aJCWq71cC/BYhnhRdkPbE6AOA4M/3ySZ1Rbui8KqG54
    
30. -----END CERTIFICATE-----

复制代码

正常链条

1. https://crt.sh?id=28285297242
   
2. 
   
3. -----BEGIN CERTIFICATE-----
   
4. MIIEyzCCA7OgAwIBAgISBRrbBF8thqNb7ktmMvBV15dWMA0GCSqGSIb3DQEBCwUA
   
5. MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
   
6. EwNZUjEwHhcNMjYwNzI3MDYzMjU2WhcNMjYwOTEwMDYzMjU1WjAAMIIBIjANBgkq
   
7. hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q33Iqv6+8Z3lLwMqXmP7YB9Z+xyTmCG
   
8. Tu3CSNv6//dvOgii3TU+0KLdv2qOTZee/eUeF1Z5XFiMcDNHtWbiftiF6GqcgZli
   
9. M5xbPRClcdCHbnthlGogouyXEgOfkeDrtHCIdP/P8/5dqFivc+Tk7cbTXrq9OPSd
   
10. 2tMjHQbKM7ZPkywsyWSaxwaO6DAfsb7F7TK55KLmXC/IrZEo2Or8VykO7OX5iADM
    
11. JmoUgit3lU9RoKW4Hqy2zJO8yoll2z0kY19NbedDvLNx3PW+RJsClbETAtAfwuwp
    
12. 1o13BQO6lRdYgjjVWhysqmp7YNXxvtJrvlmmUcraPYX/kf8GxTDdNQIDAQABo4IC
    
13. CjCCAgYwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
    
14. EwEB/wQCMAAwHwYDVR0jBBgwFoAUHy81vkYUgs1Asa55LFV4+vfUaPswMwYIKwYB
    
15. BQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8veXIxLmkubGVuY3Iub3JnLzAo
    
16. BgNVHREBAf8EHjAcgg0qLnpzdGF0aWMubmV0ggt6c3RhdGljLm5ldDATBgNVHSAE
    
17. DDAKMAgGBmeBDAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8veXIxLmMubGVu
    
18. Y3Iub3JnLzg3LmNybDCCAQoGCisGAQQB1nkCBAIEgfsEgfgA9gB1ANgJVTuUT3r/
    
19. yBYZb5RPhauw+Pxeh1UmDxXRLnK7RUsUAAABn6J8WoUAAAQDAEYwRAIgVAt3rqud
    
20. s6unl6gMt9/hP221l0b5xWfQiUkzVKHyRsoCIGbFUS77Odbh59K5vFQwc4bUMT88
    
21. IBQpoKnxXGcPflwjAH0AGoudaw/+v4G0eTnG0jEKhtbRAtTwRuIYLJ3jX14mJe8A
    
22. AAGfonxbAgAIAAAFAC4v1a8EAwBGMEQCIEInHKEXrKEsHDJoEXeo1ZW4jI/VNWud
    
23. 01lHJnqZiexLAiAmRw+K30vwBgAonnHRtcAbpSYcdXkE64lx041PAvBsRzANBgkq
    
24. hkiG9w0BAQsFAAOCAQEAnc7+68Bu10aX+SZRFadhRLyEg1klNotFeH+878BJhVkc
    
25. eeg/+q0Q/8knPAjkQJK0Y/RmvFePdTZtHEsRuQvVi3EMRCfWq5+p/bUGob8WBOfS
    
26. 4ieRNE5VZM46hXsXrEGztooRU77IlyEyhYa76uJ2WPnzoonGZp5WM84HSaZdH/kC
    
27. r6ahZi2JipNuojjh6yB64K7p9e7UFjOW5PS2UcnarKdAENrKOBezvLd+BS3d0axl
    
28. pV/gerRUD0pETplnJMLmYvmmAVG0BcSxn5EQdbyGuZbfhlvNwQ/GhOgddHfdVBjF
    
29. UJaqPxdXVTVFTdpLwrp6VRgxK5YyNcFLW289bOXNDg==
    
30. -----END CERTIFICATE-----

复制代码

正常替换

1. https://bbs.kafan.cn
   
2. 
   
3. * Server certificate:
   
4. *   subject: CN=kafan.cn
   
5. *   start date: Aug 22 14:33:06 2016 GMT
   
6. *   expire date: Aug 17 14:33:06 2036 GMT
   
7. *   issuer: CN=Huorong Anti-Virus Personal Root Certificate; C=CN; L=BJ; ST=BJ; O="Beijing Huorong Network Technology Co., Ltd."
   
8. *   Certificate level 0: Public key type ? (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
   
9. *   Certificate level 1: Public key type ? (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
   
10. *   subjectAltName: "bbs.kafan.cn" matches cert's "*.kafan.cn"
    
11. 
    
12. -----BEGIN CERTIFICATE-----
    
13. MIIDiDCCAnCgAwIBAgISBWr7u3XHqKUdxQN0TiXgIqmiMA0GCSqGSIb3DQEBCwUA
    
14. MIGVMTUwMwYDVQQDDCxIdW9yb25nIEFudGktVmlydXMgUGVyc29uYWwgUm9vdCBD
    
15. ZXJ0aWZpY2F0ZTELMAkGA1UEBhMCQ04xCzAJBgNVBAcMAkJKMQswCQYDVQQIDAJC
    
16. SjE1MDMGA1UECgwsQmVpamluZyBIdW9yb25nIE5ldHdvcmsgVGVjaG5vbG9neSBD
    
17. by4sIEx0ZC4wHhcNMTYwODIyMTEzNTMxWhcNMzYwODE3MTEzNTMxWjATMREwDwYD
    
18. VQQDEwhrYWZhbi5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHT
    
19. i9RlhtDdrRVjmhEOVrd47t+nmYwa35uz0rFKN8eSC/ebBlt7wPhSI3hkANlrVnnC
    
20. 2jvUATXQ2Tq7O6xDib5EQvcrk3t6mHoXhIZI/dJl6sfRn4jfBbAsgeICfVTbcY4H
    
21. FAKwOG4LKMaSS10vADoH2OAcbwKGVuf0wcC+twG+LbyAN3o59JF0sJIVBxK4tHvW
    
22. ZXQiaQZ8xVvy4Cy9wuDwUwC43YGNZ7C3wqOQjxy8kTM0gQou43gJx4P+Q028De7P
    
23. tl6pwMlEV+epsUYunZQPius55kdmZ+VxcuXIR0DcnuseufPIq44VIgZip8R53zrR
    
24. oiVbALqV0RNox6m1docCAwEAAaNTMFEwCwYDVR0PBAQDAgWgMBMGA1UdJQQMMAoG
    
25. CCsGAQUFBwMBMC0GA1UdEQQmMCSCCioua2FmYW4uY26CCGthZmFuLmNuggxiYnMu
    
26. a2FmYW4uY24wDQYJKoZIhvcNAQELBQADggEBAIO+Aiyo2VgpFWT1WASpxYlQl/Ce
    
27. ylQ2Uw3fMpo+ojkc8955eKcKINx5Mw0m1if2HwkyQDIDRCyE6imLl27XQAx1mixG
    
28. YRoECJSlQWayDHbSHo28Ew3H+H3fgImj/7xb9FsT6+7YwWpKV8gANp1wXGka4Dv6
    
29. Xr+TuaM5ZF3aKcfEBpmT9ydJpbD16XHesETrDd+ikSCd8uyle6AxNvdDN9lNe/IP
    
30. lVqflzgOQKBGsTVsOW5eTjhKwVQkh56LmAxw8+YYOEl0k8IT0sf2ZxHOu9dPQCRu
    
31. igPOq7ZLdloMhDgn8MWmK3O0hxXKiUAcyHZfARqEMMcQdeYtiKQdeCPgT7g=
    
32. -----END CERTIFICATE-----

复制代码

工具测试

1. * Host www.zstatic.net:443 was resolved.
   
2. * IPv6: (none)
   
3. * IPv4: 42.121.149.109, 42.121.149.108
   
4. * HTTPS-RR: -
   
5. *   Trying 42.121.149.109:443...
   
6. * ALPN: curl offers h2,http/1.1
   
7. * TLSv1.3 (OUT), TLS handshake, Client hello (1):
   
8. * SSL Trust Anchors:
   
9. *   Native: Windows System Stores ROOT+CA
   
10. * TLSv1.3 (IN), TLS handshake, Server hello (2):
    
11. * TLSv1.2 (IN), TLS handshake, Certificate (11):
    
12. * TLSv1.2 (IN), TLS handshake, Server key exchange (12):
    
13. * TLSv1.2 (IN), TLS handshake, Server finished (14):
    
14. * TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
    
15. * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
    
16. * TLSv1.2 (OUT), TLS handshake, Finished (20):
    
17. * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1):
    
18. * TLSv1.2 (IN), TLS handshake, Finished (20):
    
19. * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 / [blank] / UNDEF
    
20. * ALPN: server did not agree on a protocol. Uses default.
    
21. * Server certificate:
    
22. *   subject:
    
23. *   start date: Aug 22 14:22:55 2016 GMT
    
24. *   expire date: Aug 17 14:22:55 2036 GMT
    
25. *   issuer: CN=Huorong Anti-Virus Personal Root Certificate; C=CN; L=BJ; ST=BJ; O="Beijing Huorong Network Technology Co., Ltd."
    
26. *   Certificate level 0: Public key type ? (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
    
27. *   Certificate level 1: Public key type ? (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
    
28. *   subjectAltName: "www.zstatic.net" matches cert's "*.zstatic.net"
    
29. * OpenSSL verify result: 0
    
30. * SSL certificate verified via OpenSSL.
    
31. * Established connection to www.zstatic.net (42.121.149.109 port 443) from 　　　　 port 50120
    
32. * using HTTP/1.x
    
33. 
    
34. > GET / HTTP/1.1
    
35. > Host: www.zstatic.net
    
36. > User-Agent: curl/8.21.0
    
37. > Accept: */*
    
38. >
    
39. * Request completely sent off
    
40. 
    
41. < HTTP/1.1 200 OK
    
42. < Server: ESA
    
43. < Content-Type: text/html
    
44. < Content-Length: 52147
    
45. < Connection: keep-alive
    
46. < Date: Thu, 20 Aug 2026 13:23:10 GMT
    
47. < via: ens-cache37.l2ea134-3[61,0,DP], ens-cache37.l2ea134-3[62,62,304-0,H], ens-cache1.l2ea134-3[64,0], ens-cache9.cn8543[72,0,DP], ens-cache9.cn8543[0,0,200-0,H], ens-cache19.cn8543[0,0], ens-cache19.cn8543[1,0]
    
48. < x-amz-request-id: 6A86FFBE9FB09845E17FFFA4
    
49. < Accept-Ranges: bytes
    
50. < x-oss-object-type: Normal
    
51. < x-amz-storage-class: STANDARD
    
52. < x-oss-request-id: 6A0280E95A391B3638D71862
    
53. < x-oss-cdn-auth: success
    
54. < x-oss-storage-class: Standard
    
55. < Content-MD5: bvhe+DaySf1iEy9Tx0gLRA==
    
56. < x-oss-server-time: 41
    
57. < ETag: "6EF85EF836B249FD62132F53C7480B44"
    
58. < Last-Modified: Mon, 27 Apr 2026 10:58:06 GMT
    
59. < Vary: Accept-Encoding
    
60. < Vary: Accept-Encoding
    
61. < Vary: Accept-Encoding
    
62. < x-oss-hash-crc64ecma: 4257775444356508616
    
63. < Age: 3585
    
64. < Ali-Swift-Global-Savetime: 1787232190
    
65. < X-Site-Cache-Status: HIT
    
66. < X-Swift-SaveTime: Thu, 20 Aug 2026 13:23:10 GMT
    
67. < X-Swift-CacheTime: 3600
    
68. < Timing-Allow-Origin: *
    
69. < EagleId: 2a79952717872357756536999e, 2a79952717872357756536999e
    
70. <
    
71. 
    
72. <!DOCTYPE html><html lang="zh-CN" class="scroll-smooth" data-theme="orange">
    
73. .....

复制代码

在线本地ＰＥＭ解析
https://certsummary.unitvectorylabs.com

样本（官网直链）
提取码：无，解压码：无

1. https://cdn.zstatic.net
   
2. https://www.zstatic.net
   
3. https://srihash.zstatic.net
   
4. https://s4.zstatic.net/ajax/libs/jquery/1.12.4/jquery.min.js
   
5. https://s4.zstatic.net/ajax/libs/twitter-bootstrap/3.3.0/css/bootstrap.min.css

复制代码

火绒工程师

您好，您提供的信息已收到，我们分析确认看下，感谢反馈~

火绒工程师

.您好，您提出的问题，已经提交给研发团队跟进处理，有新进展我会随时给您同步，您也可以根据ID联系我查询问题处理进展，感谢反馈，【问题ID：67924】