*.alibaba.com

- Alibaba (China) Technology Co., Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 54:bc:54:fa:43:54:33:eb:e7:47:d1:cb was issued on by GlobalSign nv-sa.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alibaba (China) Technology Co., Ltd.

Organization: Alibaba (China) Technology Co., Ltd.
State / Province: ZheJiang
Locality: HangZhou
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:bc:54:fa:43:54:33:eb:e7:47:d1:cb
Serial Number (int): 26224420174402675322187665867
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 30:36:25:c8:d8:77:bf:10:1a:be:ab:24:8b:b1:f9:87:7b:0d:09:82
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 55:42:60:34:c8:63:79:d4:3a:79:70:a7:94:c0:56:9d:0f:13:42:ba
Fingerprint (sha256): 04:03:d0:e9:e0:cc:3b:0e:a2:35:3c:fc:98:2f:84:15:3a:8a:c0:fe:c7:b4:98:35:29:08:44:1d:36:ac:a2:cf

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.alibaba.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alibaba.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alibaba.com
gw.api.alibaba.com
m.arabic.alibaba.com
m.dutch.alibaba.com
m.french.alibaba.com
m.german.alibaba.com
m.hebrew.alibaba.com
m.indonesian.alibaba.com
m.italian.alibaba.com
m.japanese.alibaba.com
m.korean.alibaba.com
m.portuguese.alibaba.com
m.russian.alibaba.com
m.spanish.alibaba.com
m.thai.alibaba.com
m.turkish.alibaba.com
m.vietnamese.alibaba.com
*.ai.alibaba.com
*.bops.alibaba.com
*.chinasuppliers.alibaba.com
*.crm.alibaba.com
*.d.alibaba.com
*.directory.alibaba.com
*.en.alibaba.com
*.fita.alibaba.com
*.fm.alibaba.com
*.importer.alibaba.com
*.m.alibaba.com
*.m.en.alibaba.com
*.m.fm.alibaba.com
*.m.trustpass.alibaba.com
*.mcu.alibaba.com
*.onesite.alibaba.com
*.preview.alibaba.com
*.qd.alibaba.com
*.rest.alibaba.com
*.sa.alibaba.com
*.telematics.alibaba.com
*.trustpass.alibaba.com
*.tuipre.alibaba.com
alibaba.com

Other certificates including the domain name alibaba.com

(limited to 100 certificates)
img.china.alibaba.com
*.access3.alibaba.com
*.access1.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.access1.alibaba.com
*.aliexpress.com
*.access.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.access.alibaba.com
air.alibaba.com
*.access.alibaba.com
*.access3.alibaba.com
*.alibaba.com
*.access.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access3.alibaba.com
*.alibabacorp.com
*.tmall.com
*.access3.alibaba.com
ae01.alicdn.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
comment.alwx.alibaba.com
*.alibabacorp.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibaba.com
*.g-aicloud.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
mtee3-bj.alibaba.com
*.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access1.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
www.highq.com
*.access2.alibaba.com
*.alibabacorp.com
mail.aliyun.com
*.access.alibaba.com
*.alibabacorp.com
www.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.alibabacorp.com
*.access.alibaba.com
*.access1.alibaba.com
ru.aliexpress.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.access1.alibaba.com
ru.aliexpress.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibabacorp.com

Certificate

The complete raw certificate details for *.alibaba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5om3+PHF8yDKyAw0V+TXS06ayeKp
IVCYWccXWycxvEQot53j48og74BmzpeBjPRyqF5k9kupuTcFowOlADgDWw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26224420174402675322187665867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 02:37:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 13:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZheJiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HangZhou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alibaba (China) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alibaba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e689b7f8f1c5f320cac80c3457e4d74b4e9ac9e2a921509859c7175b2731bc4428b79de3e3ca20ef8066ce97818cf472a85e64f64ba9b93705a303a50038035b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.api.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.arabic.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dutch.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.french.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.german.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hebrew.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.indonesian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.italian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.japanese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.korean.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.portuguese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.russian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spanish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.thai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.turkish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.vietnamese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bops.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinasuppliers.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directory.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fita.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.importer.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcu.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onesite.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qd.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rest.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sa.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telematics.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuipre.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							303625c8d877bf101abeab248bb1f9877b0d0982
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a29da93668e3994461b8e91b26144f804ad5e99cf5b668f4de8e75368af2c098e006ded15a39ab4b9f22141c10c18481a63c04da4cf91afeea6a30f05a68aa72498672c7d4902f729dcf89b4074b87657bfaf525b9d75c7480700ed38575c7509d1accb93f75096e50e0e71808d103a566e1f469558f6217c718d34249e2582976efb737a61a7666591e3ce0ea3b1ece9d0e6acbcc957c3990f9c1b716812c09383fbd179688990fa38cbd0d212d2498e4d110d8a667ec7318bc020e4371df4a2a4ee6e582ac56f1fa2db1bd7ea8d709746dfbb4e640b369a0ddfe4e4bb8df698b83d9d5b57b44b7f667bffd8fea55fdb775579e1a8a79a3c7a4900213915780