mail.cn.ab-inbev.com

- Anheuser-Busch InBev China Ltd. -

Issued by SHECA

About this certificate

This digital certificate with serial number 69:b2:89:0f:3a:07:d7:bf:4b:98:1b:ce:d0:81:b3:9d was issued on by UniTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DigitalSignature] (00000011) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Anheuser-Busch InBev China Ltd.

Organization: Anheuser-Busch InBev China Ltd.
Organization unit: IBS
Locality: Shanghai
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 69:b2:89:0f:3a:07:d7:bf:4b:98:1b:ce:d0:81:b3:9d
Serial Number (int): 140495948294733115853535700119508333469
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cb:fe:73:7d:d1:5a:0f:a2:73:e3:65:8b:37:3b:a4:9a:85:17:cd:7c
AuthorityKeyId: f5:00:c7:8d:52:58:c4:96:69:22:85:4d:5e:7e:23:f1:6b:c2:b0:71

Fingerprint (sha1): 37:f2:2e:09:32:21:1c:f5:f8:15:1b:19:ec:70:72:6b:f4:81:88:c4
Fingerprint (sha256): 01:f7:2f:1a:37:f6:7c:42:78:c9:70:15:f7:47:5c:4f:f7:50:7e:16:1d:84:16:19:e5:32:36:e2:e1:47:cf:08

Issuing Certificate URL: http://ldap2.sheca.com/root/shecaglobalsub.der

Revocation information

OCSP Server: http://ocsp3.sheca.com/Global/global.ocsp
CRL Distribution Point: ldap://ldap2.sheca.com:389/cn=CRL1217.crl,ou=RA9020100,ou=CA12,ou=crl,o=UniTrust Global?certificateRevocationList?base?objectClass=cRLDistributionPoint
CRL Distribution Point: http://ldap2.sheca.com/CA12/RA9020100/CRL1217.crl

Check the revocation status for certificate mail.cn.ab-inbev.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.cn.ab-inbev.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cn.ab-inbev.com
autodiscover.cn.ab-inbev.com
portal.cn.ab-inbev.com
uc.cn.ab-inbev.com

Other certificates including the domain name ab-inbev.com

(limited to 100 certificates)
psn.ab-inbev.com
mrs1-phs.ab-inbev.com
incapsula.com
wccstesting.cn.ab-inbev.com
akamai-san152.exacttarget.com
afrc.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
gdapr506.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
incapsula.com
analyticsplatform-dev.ab-inbev.com
carosolutions.ab-inbev.com
sni.cloudflaressl.com
mail.cn.ab-inbev.com
imperva.com
imperva.com
incapsula.com
imperva.com
jira.ab-inbev.com
incapsula.com
api-devportal.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.stout.aurora.ab-inbev.com
incapsula.com
mrs1-ils.ab-inbev.com
djservicebot.ab-inbev.com
imperva.com
g4q-cig.ab-inbev.com
incapsula.com
midesktop.kr.ab-inbev.com
dp.cn.ab-inbev.com
imperva.com
imperva.com
onedesktop.ab-inbev.com
imperva.com
incapsula.com
incapsula.com
autopasslicenseingsolutions.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
incapsula.com
incapsula.com
prod.18.slot.cdn.salesforce-communities.com
incapsula.com
imperva.com
imperva.com
sni.cloudflaressl.com
incapsula.com
ssl713811.cloudflaressl.com
*.cms-admin.ab-inbev.com
logisticstransformation-qa.ab-inbev.com
carosolutions.ab-inbev.com
imperva.com
abi-api-qa.ab-inbev.com
incapsula.com
prod.18.slot.cdn.salesforce-communities.com
sappodev.ab-inbev.com
psn.ab-inbev.com
sapedi.cn.ab-inbev.com
imperva.com
incapsula.com
www.budweiserapac.com
mail.sabmiller.com
carosolutions-dev.ab-inbev.com
globalsso.ab-inbev.com
incapsula.com
imperva.com
dpo-qa.ab-inbev.com
mrs1-mel.ab-inbev.com
incapsula.com
status.marlin.ab-inbev.com
imperva.com
imperva.com
incapsula.com
lighthouse.ab-inbev.com
sni.cloudflaressl.com
dev.aurora.ab-inbev.com
mrs1-ubs.ab-inbev.com
imperva.com
sfmm.cn.ab-inbev.com
swe.ab-inbev.com
wikipack.ab-inbev.com
incapsula.com
incapsula.com
carosolutions.ab-inbev.com
jira.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
imperva.com
jira-dev.ab-inbev.com
compliancechannelglobal-api.ab-inbev.com
prod.18.slot.cdn.salesforce-communities.com
*.ab-inbev.com
mrs1-sag.ab-inbev.com
imperva.com
dp.cn.ab-inbev.com
mrs1.na.ab-inbev.com
wms2t-be-test.ab-inbev.com
incapsula.com
imperva.com

Certificate

The complete raw certificate details for mail.cn.ab-inbev.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvquKXm6r92fY5TySv7os
ZRW7stqRIrfSmpgkYaG2Oz8tirysJzx88mBXX2FpCreUslyVDxv3N8nFhtlJB58X
HrmY5/lvLhuTsjKKt24TaQCsaaZL9Fwk1sr58od7U8eWqsRoZzcRHf7FLfO+i3LD
blZrYKoFdqc8T/8OQIJ3OtiXYsXuVloTBT3ZA+UMW3pbrbVKlmEK6XSmIB8t8iFR
hMyW7nAAdleZTiZm/+Rk7Rj5d8NW9uwWajUpfWbdjdeOAfma8VE0O3j2fAZMFUrQ
jvEBD6+egjr4rJUqxwflFUKmDmdoVJBeKXMnUgyMH2wp5rbSgxMTJkWKcq8Vdc3O
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140495948294733115853535700119508333469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHECA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-19 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-19 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.cn.ab-inbev.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IBS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Anheuser-Busch InBev China Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24069867718492969419960917071971633618084533981041251511779354532352213123825993252310951491663457663295052382191335046969663239835770738598254106328225899284746875738516534922498815953615582978526342858586976015653443699091113710040675513039928592947785019949934359156072873696687103969340068010300436547834732641939820796244134385271663402356646967818388090099964290844716893501890312698747893446457719258578115117580533532666295645012874164152175018233175053828188071160823266024275314900518057599132174780256784612657801476797832131580167677166729620295158100254996236340113876588111969742677078960687281771236993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f500c78d5258c4966922854d5e7e23f16bc2b071
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbfe737dd15a0fa273e3658b373ba49a8517cd7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.1.8888.149
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.sheca.com/policy/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cn.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cn.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cn.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.cn.ab-inbev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap2.sheca.com:389/cn=CRL1217.crl,ou=RA9020100,ou=CA12,ou=crl,o=UniTrust Global?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/CA12/RA9020100/CRL1217.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp3.sheca.com/Global/global.ocsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ldap2.sheca.com/root/shecaglobalsub.der'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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