*.alibaba.com

- Alibaba (China) Technology Co., Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 6b:d3:0d:3a:cf:c7:99:dc:8a:cf:da:3f was issued on by GlobalSign nv-sa.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alibaba (China) Technology Co., Ltd.

Organization: Alibaba (China) Technology Co., Ltd.
State / Province: ZheJiang
Locality: HangZhou
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:d3:0d:3a:cf:c7:99:dc:8a:cf:da:3f
Serial Number (int): 33370041874470147348673583679
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 86:70:40:70:fa:ad:a9:5e:da:7f:10:8e:e4:39:12:70:4e:e1:6e:05
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2f:59:d0:db:12:00:a3:ae:da:42:00:bc:25:14:a1:6c:91:5c:a4:1b
Fingerprint (sha256): 06:22:fe:15:d5:c1:1c:09:db:31:5f:e9:09:c5:db:d7:b2:b4:05:1c:d9:9b:c3:9f:c6:7e:85:d2:e8:1f:c1:55

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.alibaba.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alibaba.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alibaba.com
gw.api.alibaba.com
m.arabic.alibaba.com
m.dutch.alibaba.com
m.french.alibaba.com
m.german.alibaba.com
m.hebrew.alibaba.com
m.indonesian.alibaba.com
m.italian.alibaba.com
m.japanese.alibaba.com
m.korean.alibaba.com
m.portuguese.alibaba.com
m.russian.alibaba.com
m.spanish.alibaba.com
m.thai.alibaba.com
m.turkish.alibaba.com
m.vietnamese.alibaba.com
*.ai.alibaba.com
*.bops.alibaba.com
*.chinasuppliers.alibaba.com
*.crm.alibaba.com
*.d.alibaba.com
*.directory.alibaba.com
*.en.alibaba.com
*.fita.alibaba.com
*.fm.alibaba.com
*.importer.alibaba.com
*.m.alibaba.com
*.m.en.alibaba.com
*.m.fm.alibaba.com
*.m.trustpass.alibaba.com
*.mcu.alibaba.com
*.onesite.alibaba.com
*.preview.alibaba.com
*.qd.alibaba.com
*.rest.alibaba.com
*.sa.alibaba.com
*.telematics.alibaba.com
*.trustpass.alibaba.com
*.tuipre.alibaba.com
*.wapa.alibaba.com
alibaba.com

Other certificates including the domain name alibaba.com

(limited to 100 certificates)
img.china.alibaba.com
*.access3.alibaba.com
*.access1.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.access1.alibaba.com
*.aliexpress.com
*.access.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.access.alibaba.com
air.alibaba.com
*.access.alibaba.com
*.access3.alibaba.com
*.alibaba.com
*.access.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access3.alibaba.com
*.alibabacorp.com
*.tmall.com
*.access3.alibaba.com
ae01.alicdn.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
comment.alwx.alibaba.com
*.alibabacorp.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibaba.com
*.g-aicloud.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
mtee3-bj.alibaba.com
*.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access1.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
www.highq.com
*.access2.alibaba.com
*.alibabacorp.com
mail.aliyun.com
*.access.alibaba.com
*.alibabacorp.com
www.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.alibabacorp.com
*.access.alibaba.com
*.access1.alibaba.com
ru.aliexpress.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.access1.alibaba.com
ru.aliexpress.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibabacorp.com

Certificate

The complete raw certificate details for *.alibaba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Q1v4rgzNXQc5BAjoYu
wTIaYm88t9LObrQwPXd8b0wDvX3KpIvcbkWmPpXu9iohzUXX0ybTQX/vyWn1c9+p
jsUn+5aU7rSlImpY7QKgZZMaiM86rZog3KkSV8gdOBiSX8lXb0o03Je7He991eKb
V0lv7bnpsU2Rz3PH5EaOPMNYPb64nVCQ0CneuyoCuWQcBK7/wmSadeeUFA8YJebQ
H29B0HH8/ChodSP0JdovFxlP8ek0PY3/0e22IDQ+M91YX6FlUuBHW36ZXXs8YCFP
cUXq+Kp5ZLLNVV80/q/M0ImCd2nD7bwvZsqMXvieobAHzaGd2CKpj8gBdgRJ+KKE
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33370041874470147348673583679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 08:22:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 13:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZheJiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HangZhou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alibaba (China) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alibaba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26748816870353407847748592223385065936408279439316093800915323999759993428258972331904909758379682875482607866859672995396841884393677988591653028808638454268437384616350079567020196889274808363355803145124413559702839697754138829491996438042414314360914373558476160504142618838800667158201334023501167880478687015406567257132383438221662570145383140067900726507786450699317960371182751591565619961838731352466623434610231614489289301211361752588378931939609382748660090162843215155078437614846640965527644539391745138519969499207736981025553521407078643472542403994774306374567109336138065261241663186722682384319681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.api.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.arabic.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dutch.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.french.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.german.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hebrew.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.indonesian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.italian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.japanese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.korean.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.portuguese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.russian.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spanish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.thai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.turkish.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.vietnamese.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ai.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bops.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinasuppliers.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directory.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fita.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.importer.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.en.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.fm.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcu.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onesite.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qd.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rest.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sa.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telematics.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustpass.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuipre.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wapa.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86704070faada95eda7f108ee43912704ee16e05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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