comment.alwx.alibaba.com

- Alibaba (China) Technology Co., Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:89:46:a5:82:3d:2d:58:f4:0b:9d:d0 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alibaba (China) Technology Co., Ltd.

Organization: Alibaba (China) Technology Co., Ltd.
State / Province: ZheJiang
Locality: HangZhou
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:89:46:a5:82:3d:2d:58:f4:0b:9d:d0
Serial Number (int): 24305787222103399653293399504
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b4:98:2b:c0:d3:9b:9a:ea:1f:72:7a:d9:1b:03:d7:9d:aa:96:8f:be
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 71:02:ab:b5:47:39:29:c2:e1:d8:d2:66:d1:4b:c4:b5:fe:e8:76:aa
Fingerprint (sha256): 03:39:78:da:9c:f7:c4:de:73:87:e0:0d:b0:bd:d5:c1:b8:22:28:9d:9d:c8:3e:1c:91:2c:7e:ca:95:af:b4:bb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate comment.alwx.alibaba.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for comment.alwx.alibaba.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

comment.alwx.alibaba.com

Other certificates including the domain name alibaba.com

(limited to 100 certificates)
img.china.alibaba.com
*.access3.alibaba.com
*.access1.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.access1.alibaba.com
*.aliexpress.com
*.access.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.access.alibaba.com
air.alibaba.com
*.access.alibaba.com
*.access3.alibaba.com
*.alibaba.com
*.access.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access3.alibaba.com
*.alibabacorp.com
*.tmall.com
*.access3.alibaba.com
ae01.alicdn.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
comment.alwx.alibaba.com
*.alibabacorp.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibaba.com
*.g-aicloud.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
mtee3-bj.alibaba.com
*.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access1.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
www.highq.com
*.access2.alibaba.com
*.alibabacorp.com
mail.aliyun.com
*.access.alibaba.com
*.alibabacorp.com
www.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.alibabacorp.com
*.access.alibaba.com
*.access1.alibaba.com
ru.aliexpress.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.access1.alibaba.com
ru.aliexpress.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibabacorp.com

Certificate

The complete raw certificate details for comment.alwx.alibaba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup8r//KT0NcnopGJM6Gx
sWlTGv4W1d3d8DiEu1tOwPFGGT5YNwyCe0CinhRk4WUZxeJ04CH2XXIQhNK7OsO4
713y8HbOuSb81ze+J6LMGmJ/4veodUVCpNr+ePAcCR+ajb5bz5F1txD8fNH4d6o8
EI+lMrfQ5oKF2WfqmX4FRzriqtxWHO/b8zVjZyq6LZ2c6qW+BCg2BOYxNwRBkBJk
zuSLzoAoXyntiRojiQ8jIKa0Stza2uP9tyrdb9ByZ0fUH6QJXjSqirvhjMZtQfxl
6NDQPCpVP84M+p79TqK39Vf4s4jk8fJ7CkovaPELa1ML2LwnJtEdjJ6IkkN5BBmp
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24305787222103399653293399504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-31 08:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 08:56:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZheJiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HangZhou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alibaba (China) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comment.alwx.alibaba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23558815300238749580863478337945867654291339337672230209876640354107956244658371419385873542276873580761540000903460558949712810923171145460662006634972289201286569323385076571329133056364712798561466864572994120067999302571821231537758650075406971538017884832236229298017174901277600128896910233785697108117344926423083523752064277641094700123904624070716416910630287284003120722164115749309515799844887204040143604639200243280022269022024857988455078652483024263032127517092489320916200129690619651634192966872387074864744957745322180973863637682829859693031193285318084296342909843008375621295963212536625883621643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comment.alwx.alibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4982bc0d39b9aea1f727ad91b03d79daa968fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bf5362d2702c136df5f8118b750f883dc75f9721ffdff05a1e06be27e4fbeda3afb2255ac32f69b9ec9d9567507b39804344ac7e7645d5b325cd6c1792e2ea3514e1dba0d7c0e195a8aaef658d7b0cd2ce855e2bc33aac159b415020a3e0a4423d3c7b8b930f68d793f2cf7686334b66926fa1ef3a5f6e9a80f785204bc56378afe3b15db6ab45c2240660cc06b183d80962f9a74ee5617eb8043e02638840b6519dbffb0e8b146a91380317a50472aa8cdece681ca5658d5680e95e9ec62e0f48d8869d14b3c4867b7bf1a9815eb25228bc5955f4351ab310edf27a6c656baf9a750197b9b5f4c1628712c65ddd92904b0c5d29e64094fb61b42d00180e3089