Personal tools


Revision as of 18:41, 28 April 2023 by Timo (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

.CN is the official country code Top-Level-Domain (ccTLD) of China. .CN domains can register by organizations and individuals. Documentary evidence is required to prove the registrants authenticity. Registrant verification will become mandatory for renewals of existing domains from the 1st January 2022.

Introduced 1990
Country China
Registry NeuStar
IDN Capable Yes
Webpage Register .CN





Allowed TLDs




Dispute Policy



1api GmbH




Min. Characters


Max. Characters


Character Set
  • Letters and numbers
  • Hyphens ("-"), however not at the beginning or directly in front of the TLD
  • IDN: allowed
  • Registrant Contacts: Required: 1 / Maximum: 1
  • Admin Contacts: Required: 1 / Maximum: 1
  • Tech Contacts: Required: 1 / Maximum: 1
  • Billing Contacts: Required: 1 / Maximum: 1

{{{Possible Extensions}}}

IDN capable


Restore capable


Handle Updates


Registration System


Allowed number of NS

1 to 6

Registry Nameservercheck


Host IP-Addresses Type

IPv4 / IPv6

Hosts managed as


Root Nameserver Update


SEC DNS Interface

not available



Transfer Periods


Transfer Authcode required


Transfer Real-Time


Transfer ACK by


Transfer NACK by


Transfer Lock


Owner Change by



{{{Possible Extensions}}}

Registration Periods

1-5 years

Add Grace Period

0 days

Accounting Period

-7 days

Finalization Period

-1 day

Failure Period

-1 day

Payment Period

-61 days

Deletion Restorable Period

15 days

Deletion Hold Period

0 days

Explicit Renewals


Renewal Periods

1-4 years


Domain Registration

Domains can be registered in Real-Time with the API AddDomain command, a valid .CN contact at the registry is required to order .CN domains in Real-Time with the AddDomain command.

.CN domains require a validated owner contact handle for registration. Create a new registry Contact Handle with the command CheckDomainRegistration or use a already validated contact, that has already been used for another domain.

Please see below information for the required documents and verification.

command = AddDomain / CheckDomainRegistration
domain  = (DOMAIN)


ownercontact0 = (CONTACT)
admincontact0 = (CONTACT)
techcontact0 = (CONTACT)
billingcontact0 = (CONTACT)
nameserver0 = (NAMESERVER)
nameserver1 = (NAMESERVER)





Further information can be found below

auth = (TEXT) | (NULL)
period = (PERIOD)
transferlock = 0 | 1 | (NULL)

Domain Transfer

The transfer has to be initiated by the gaining registrar and can be requested with the API TransferDomain command.
A valid Authorization Code must be provided to initiate a transfer successfully. You may obtain the authorization code from the losing registrar.
As soon as a domain transfer has been initiated it can either be approved ("ACK") by Registrar or denied ("NACK") by Registrar.
.CN Transfers take up to 5 to 10 days

command = TransferDomain
domain = (DOMAIN)


auth = (TEXT) | (NULL)


period = (PERIOD)
transferlock = 0 | 1 | (NULL)

Delete Domain

Domains can be deleted with the API DeleteDomain command.
There is a Deletion Restorable Period of 15 days.

command = DeleteDomain
domain = (DOMAIN)

Restore Domain

Restores can be processed in realtime. A restore is possible within 15 days upon deletion. Please use the command RestoreDomain.

command = RestoreDomain
domain = (DOMAIN)


subuser = (TEXT)
renewalmode = (NULL) | (TEXT)


A Contact needs to be validated at the registry before it can be used as a registrant contact for a .cn domain. This also applies to owner changes, the new owner contact needs to be created and validated at CNNIC before it can be used as a registrant for a .cn domain.

Please use CheckDomainRegistration with a random not registered domain, the new contact handle and the respective X-Flags ,to create a new contact at CNNIC. The registry contact handle will appear in the response of the command as REPOSITORYOWNERCONTACT.

Further Info about X-Flags and required documents:

After a contact was validated at CNNIC, the ownerchange can be done with the API ModifyDomain command.

command = CheckDomainRegistration / ModifyDomain
domain  = / (DOMAIN)
ownercontact0 = (CONTACT)

TLD specific



For private persons:

GAJMTX // Exit-Entry Permit for Travelling to and from Hong Kong and Macao
GAJZZ // Residence permit for Hong Kong, Macao residents
HZ // Foreign passport
JGZ // Chinese officer certificate
QT // Others
SFZ // Chinese ID card
TWJMTX // Travel passes for Taiwan Residents to Enter or Leave the Mainland
TWJZZ // Residence permit for Taiwan residents
WJLSFZ // Foreign Permanent Resident ID Card

For Organizations

BDDM // Military Code Designation
BJWSXX // Beijing School for Children of Foreign Embassy Staff in China Permit
GZJGZY // Notary Organization Practicing License
JDDWFW // Military Paid External Service License
JJHFR // Fund Legal Person Registration Certificate
JWJG // Overseas Organization Certificate
LSZY // Practicing License of Law Firm
MBFQY // Private Non-Enterprise Entity Registration Certificate
MBXXBX // Private School Permit
ORG // Chinese Organization Code Certificate
QTTYDM // Others-Certificate for Uniform Social Credit Code
SFJD // Judicial Expertise License
SHFWJG // Social Service Agency Registration Certificate
SHTTFR // Social Organization Legal Person Registration Certificate
SYDWFR // Public Institution Legal Person Certificate
TYDM // Certificate for Uniform Social Credit Code
WGCZJG // Resident Representative Offices of Foreign Enterprises Registration Form
WGZHWH // Registration Certificate of Foreign Cultural Center in China
WLCZJG // Resident Representative Office of Tourism Departments of Foreign Government Approval Registration Certificate
YLJGZY // Medical Institution Practicing License
YYZZ // Chinese business license
ZJCS // Religion Activity Site Registration Certificate

The related ID-Number

.CN special registration restrictions

.CN regional domain names are specific TLDs representing Chinese regions. The following .CN regional TLDs are available:

  • (Anhui)
  • (Beijing)
  • (Chongqing)
  • (Fujian)
  • (Guangdong)
  • (Gansu)
  • (Guangxi)
  • (Guizhou)
  • (Henan)
  • (Hubei)
  • (Hebei)
  • (Hainan)
  • (Xianggang/Hongkong)
  • (Helongjiang)
  • (Hunan)
  • (Jilin)
  • (Jiangsu)
  • (Jiangxi)
  • (Liaoning)
  • (Aomen/Mocao)
  • (Neimenggu)
  • (Ningxia)
  • (Qinghai)
  • (Sichuan)
  • (Shandong)
  • (Shanghai)
  • (Shanxi)
  • (Shangxi)
  • (Tianjin)
  • (Taiwan)
  • (Xinjiang
  • (Xizang/Tibet
  • (Yunnan
  • (Zhejiang

Registrants must be businesses or organizations.

  • Registrants may not register or use a domain name that is deemed by CNNIC to:
    • Be against the basic principles prescribed in the Constitution of the People's Republic of China (“PRC”);
    • Jeopardize national security, leak state secrets, intend to overturn the government, or disrupt of state integrity of the PRC;
    • Harm national honour and national interests of the PRC;
    • Instigate hostility or discrimination between different nationalities, or disrupt the national solidarity of the PRC;
    • Violate the PRC’s religious policies or propagate cult and feudal superstition;
    • Spread rumours, disturb public order or disrupt the social stability of the PRC;
    • Spread pornography, obscenity, gambling, violence, homicide, terror or instigate crimes in the PRC;
    • Insult, libel against others and infringe other people's legal rights and interests in the PRC; or
    • Take any other action prohibited by laws, rules and administrative regulations of the PRC.
  • The administrative contact of the domain must be an employee of the applying company.

Required Documents

It is required to provide all the appropriate documentation described below with every .CN domain name registration.

Please note:
If the name of the registrant cannot be filled in completely due to the number limitation of characters of the system, the first 64 characters should be filled in. The Chinese name and number shall be completely consistent with the certificate. Switching of Chinese and Traditional Characters is not allowed.

The domain name information should be filled out accurately and the name and certificate number of the registrant in the domain name registration information should be consistent with the content in the registrant’s identity certificate. Also, the name printed on the passport must only contain English characters as CNNIC cannot process auditing of the passport and registration cannot be completed.

Registrants shall submit the original colour electronic scanned file and all information in the certificate shall be clear and complete. 

The content in the certificate shall not be altered manually or electronically such as via Photoshop. 

For individuals:

Chinese Individuals: A copy of government-issued identification for the Registrant which must match what is listed in WHOIS. (Example: ID Card, passport, etc).

Non-Chinese Individuals can only submit passports as valid supporting documentation.  Driver Licenses or ID Cards will no longer be accepted. Note: The name printed on the passport must only contain English characters as CNNIC cannot process auditing of the passport and registration cannot be completed.

For both: In .JPG format between 100K and 1MB. The passport number must also be included.

For organizations:

Chinese Institutions: A copy of corporate documentation that shows it is a legal entity. (Example: Articles of incorporation, business license) Additionally, the CNNIC audit system only allows one page to be uploaded. They have requested that only the first page of the license, which mentions the official company name be provided.

Non-Chinese Institutions: They shall submit scanned copies of certificates issued by their corresponding authority. Screenshots of the website verification as identification materials will no longer be accepted. If there is no certificate number in the certificate, the number zero ‘0’ should be filled in.

Documentation Submission:

The required documentation and the .CN contact handle id must be sent via email to [email protected] from where it is afterwards forwarded to CNNIC.

Validation of Required Documentation:

CNNIC will review the documents, which can take up to 5 days. CNNIC will be auditing every document submitted. Once again, please note that if Chinese characters are used in the supporting documents, then Chinese characters must be used for the registrant contact Name and/or Organization. Pinyin characters are not allowed.

Additional information:

CNNIC reserves the right to do an audit of the supporting documentation and if the information does not match what is listed in WHOIS, CNNIC reserves the right to suspend such registration.

Once a ‘Registrant-ID’ is registered along with the supporting documentation, this Registrant-ID is considered to be ‘white-listed’ by CNNIC. Future registrations under the same ‘Registrant-ID’ will not need to submit new documentation. This applies to both Company and Individual registrations. The only documentation needed will be the Letter of Commitment for the new Registrations.

No Special Characters in Registrant Names

As you may know, the Chinese Registry CNNIC has been enforcing the Real-Name Verification (RNV) regulation for .CN and .中国 (.xn--fiqs8s) domains since last year. (What about .公司 (.xn--55qx5d) and .网络 (.xn--io0a7i))?

The RNV process requires a real name of an individual person to be provided in the Owner Contact. In addition, proof of identification (e.g. passport, ID card) is necessary in order to register / transfer / trade a .CN or .中国 domain.

We had some failed audits due to special characters in the registrant's name. After consulting with the registry, the following information was determined:

If the registrant is foreign (so not Chinese) and the name contains special non-English characters, CNNIC cannot process auditing the passport and registration / transfer / trade cannot be completed.

Solution: Only option is to provide a registrant name without special characters. If the registrant is a company, the domain may be registered to another person in the company who does not have special characters in the name and is willing to submit a verification document to CNNIC.

Please note: We refer here to the full name as it appears on the verification document such as the passport. Examples of special characters that lead to problems:

German umlauts such as ä, ü, ö Spanish / French letters with accents such as é and other characters not found in the English language

If you have any further questions, please contact our Support Team

Rejected validation attempts:

If the required documents are not complete or contain errors or if the applying registrant does not fulfill the registry's requirements the registry may reject the registration. Unfortunately, they do not automatically provide a reason for the rejection to the registrar. In case you need to know the exact reasons for a rejection, please contact Customer Care. We will then contact the registry and ask for the reasons for the rejection. Please consider that this may take up to 7 working days.

Change of Registrant

Modifications to a .CN domain owner contact can be performed in the Control Panel or using the API.

The new owner information has to be verified prior to updating the update. Otherwise, the registry will state that the new contact is not a valid owner. Please see the above information for the required documents.

Rejected ownerchange attempts:

If the required documents are not complete, contain errors or the applying registrant does not fulfill the registry's requirements, the registry may reject the ownerchange. Unfortunately, they do not automatically provide a reason for the rejection to the registrar. In case you need to know the exact reasons for a rejection please contact Customer Care. We will then contact the registry and ask for the reasons for the rejection. Please consider that this may take up to 7 working days.

Transfer notes

  • Please ensure, that you have a correct “Authorization Code” associated with the domain, before initiating the transfer, otherwise it will fail.
  • Ensure that your respective domain does not have a lock-status (REGISTRAR-LOCK or HOLD). This can be seen in the WHOIS. If the domain is locked, then the owner can demand that this be unlocked.
  • Initiate the transfer on time and not just shortly before the domain expires.
  • Please ensure that the domain is older than 60 days otherwise the transfer will be denied.
  • Please note that if a .CN domain name is registered with a direct accredited CNNIC registrar (Domestic), it can only be transferred to a gateway registrar (Foreign) with a manual procedure. Please contact our support by email and send us the domain name and the respective authorization code.

In case that a domain name is registered with a domestic registrar, the error message of our system will return the message:

545 Object does not exist (<value>SRS Major Code: XXXX</value> |
<value>SRS Minor Code: XXXXXXXX</value> |
<value>--DOMAIN_NOT_FOUND</value> | <value>Domain name: DOMAIN.CN</value>)

CNNIC Certificate

It is possible to create an E-Certificate for registered .CN domains. That can be made at the following registry page:

CNNIC e-certificate

The domain name and the phone number of the registrant have to be provided for the creation of the certificate.

IDN under .COM.CN

.COM.CN does not accommodate IDN domains, only ASCII. It is only possible to register IDNs in the top-level .CN zone.


The Trustee Addon for .CN domains is currently not available.

The following overview shows you all available Domain Addons which can be used for this special kind of TLD. It also shows the respective API parameters which are required to activate the Domain Addons:

Addon Class Parameter to (de)activate *1) Renewal term *2) Affected Parameters *3)

*1) Parameter to (de)activate: When accessing our backend through the API, you can either activate the addon with X-CN-ACCEPT-TRUSTEE-TAC=1 or deactivate it with
*2) Renewal Term: Is the minimum renewal term of the "Addon Class"
*3) If you are using a "Trustee" Domain Addon normally the original owner contact or the original admin contact or both are replaced by a contact provided by the trustee provider.


Restore Process

To restore a domain as a RegistrarOC customer, you simply have to execute the RestoreDomain command. HEXONET directly forwards the restore request to the registry, which performs the restore in real-time. As soon as the restore is complete, the domain will get assigned to your account with the original domain data.

Please do not initiate a restore directly at the registry (e.g. using the registrar webinterface). All restore operations must be performed through our system.