*.alibaba.com

- Alibaba (China) Technology Co., Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0f:f6:16:b2:cb:04:51:fe:c0:44:32:ee was issued on by GlobalSign nv-sa.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alibaba (China) Technology Co., Ltd.

Organization: Alibaba (China) Technology Co., Ltd.
State / Province: ZheJiang
Locality: HangZhou
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f6:16:b2:cb:04:51:fe:c0:44:32:ee
Serial Number (int): 4939778089157350704539775726
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 6b:6f:77:08:ca:0f:f1:97:3c:08:14:32:38:05:9c:9a:18:51:12:ca
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2b:e6:6f:4c:50:75:2e:f9:fe:c2:31:17:b4:2c:18:a0:2b:fb:a5:8f
Fingerprint (sha256): 00:36:79:95:00:45:30:f9:f3:8a:b5:35:da:d1:77:f6:52:13:c2:d8:99:50:ef:f7:4b:90:52:a2:e7:6f:a3:d1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.alibaba.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alibaba.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alibaba.com
gw.api.alibaba.com
m.arabic.alibaba.com
m.dutch.alibaba.com
m.french.alibaba.com
m.german.alibaba.com
m.hebrew.alibaba.com
m.indonesian.alibaba.com
m.italian.alibaba.com
m.japanese.alibaba.com
m.korean.alibaba.com
m.portuguese.alibaba.com
m.russian.alibaba.com
m.spanish.alibaba.com
m.thai.alibaba.com
m.turkish.alibaba.com
m.vietnamese.alibaba.com
*.ai.alibaba.com
*.aicloud.alibaba.com
*.alitalk.alibaba.com
*.aliwx.alibaba.com
*.alwx.alibaba.com
*.bops.alibaba.com
*.botframework.alibaba.com
*.chinasuppliers.alibaba.com
*.cloud.alibaba.com
*.crm.alibaba.com
*.crmweb.alibaba.com
*.d.alibaba.com
*.directory.alibaba.com
*.en.alibaba.com
*.fita.alibaba.com
*.fm.alibaba.com
*.h.alibaba.com
*.hz-productposting.alibaba.com
*.icbu.alibaba.com
*.importer.alibaba.com
*.inspection.alibaba.com
*.m.alibaba.com
*.m.en.alibaba.com
*.m.fm.alibaba.com
*.m.trustpass.alibaba.com
*.mcu.alibaba.com
*.mos.alibaba.com
*.onesite.alibaba.com
*.prepub.alibaba.com
*.preview.alibaba.com
*.qd.alibaba.com
*.rest.alibaba.com
*.sa.alibaba.com
*.sec-ops.alibaba.com
*.sm.alibaba.com
*.t.alibaba.com
*.telematics.alibaba.com
*.trustpass.alibaba.com
*.tuipre.alibaba.com
*.turkish.alibaba.com
*.us.alibaba.com
*.wapa.alibaba.com
alibaba.com

Other certificates including the domain name alibaba.com

(limited to 100 certificates)
img.china.alibaba.com
*.access3.alibaba.com
*.access1.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.access1.alibaba.com
*.aliexpress.com
*.access.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.access.alibaba.com
air.alibaba.com
*.access.alibaba.com
*.access3.alibaba.com
*.alibaba.com
*.access.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access3.alibaba.com
*.alibabacorp.com
*.tmall.com
*.access3.alibaba.com
ae01.alicdn.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
comment.alwx.alibaba.com
*.alibabacorp.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibaba.com
*.g-aicloud.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
mtee3-bj.alibaba.com
*.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access1.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
www.highq.com
*.access2.alibaba.com
*.alibabacorp.com
mail.aliyun.com
*.access.alibaba.com
*.alibabacorp.com
www.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.alibabacorp.com
*.access.alibaba.com
*.access1.alibaba.com
ru.aliexpress.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.access1.alibaba.com
ru.aliexpress.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibabacorp.com

Certificate

The complete raw certificate details for *.alibaba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyOM//2HKmf2sU7XiLb
4q4voCOI7ld+SF5Y47nby29ANtz5w6r0InRRiFDc60BhC0rpQ022C09U9oN5R2Lz
9wH37Qf3lDIREUk1YTzZVCwyZVs72kYrNa6JY0g+Ugrup9qzWI6e0pqIM4vnWB/n
kcMxRhKnCWwRHPByoQSV68FuvXc6fd6Sxs3WLEX0s/5RPAbBRCGb7tzttRCP81kw
l8aXz/02Zw2Eg2m+cRjPgibFMuBPo6BAuJzcz92xlaMTUySSYJKUn7viOLnd5YSI
6YeQ8x8jUzsC5nzSEYU73RJjkGzaSsmKFAR1KxG1NJdW1R35OSJPtJWFarskzfFK
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4939778089157350704539775726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 02:47:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 13:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZheJiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HangZhou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alibaba (China) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alibaba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25601007670281505281690549874433342590500166943087281874110036875127825808433965046991021870865287759825436483416651549916571437780912644975165101663262097110162447850231535519984729044067634292785186162164960055227693625344204413624994395738361842828899340473145122022134662559879712221430026871441823526438767655285947422462811837951971050808309315224085934563080882554524308107795195740861990784303565003290934102100281398440505770116607342167803764105365724758782935735937377972292707528312448549028120216967940265471481951485057236790759316819397034713044512857077778473234233000617251564777094824787902500784761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.api.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.arabic.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dutch.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.french.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.german.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hebrew.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.indonesian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.italian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.japanese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.korean.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.portuguese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.russian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spanish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.thai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.turkish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.vietnamese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aicloud.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alitalk.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliwx.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alwx.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bops.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botframework.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinasuppliers.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crmweb.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directory.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fita.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hz-productposting.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icbu.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.importer.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspection.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcu.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mos.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onesite.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepub.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qd.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rest.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sa.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec-ops.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telematics.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuipre.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turkish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wapa.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b6f7708ca0ff1973c08143238059c9a185112ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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