*.fredliang.cn

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 74:36:97:0d:6f:2c:3e:29:6b:05:dd:ca was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.fredliang.cn,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 74:36:97:0d:6f:2c:3e:29:6b:05:dd:ca
Serial Number (int): 35966256458692650406955572682
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 17:3b:f9:da:cf:d9:9f:57:8a:14:8d:da:02:04:c5:31:be:b8:9f:70
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c8:1e:74:4b:c9:1c:f2:58:f4:76:4c:a8:02:0f:5f:cb:c2:70:64:a1
Fingerprint (sha256): 43:2c:39:16:04:25:6a:d5:2b:9a:29:85:c6:09:49:b5:65:ff:f9:0c:76:5a:bd:0a:bd:c3:2f:5e:10:dd:2c:8b

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.fredliang.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fredliang.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fredliang.cn
fredliang.cn

Other certificates including the domain name fredliang.cn

(limited to 100 certificates)
backend.fredliang.cn
blog.fredliang.cn
*.fredliang.cn
cdn.blog.fredliang.cn
images.fredliang.cn
doc.fmt.fredliang.cn
fathom.fredliang.cn
g.cdn.fredliang.cn
doc.fmt.fredliang.cn
www.digiheft.com
deploy.fredliang.cn
petersappliance.com
groups.intelligere.co
www.cv.nu
statics.fredliang.cn
fredliang.cn
fathom.fredliang.cn
wiki.hackday.fredliang.cn
cdn.blog.fredliang.cn
status.fredliang.cn
pan.fredliang.cn
hugo.fredliang.cn
statics.fredliang.cn
*.fredliang.cn
elastic.fredliang.cn
static.fredliang.cn
*.fredliang.cn
storage.fredliang.cn
statics.fredliang.cn
statics.fredliang.cn
*.fredliang.cn
fathom.fredliang.cn
static.fredliang.cn
storage.fredliang.cn
www.liste.live
manager.fredliang.cn
manager.fredliang.cn
fmt.fredliang.cn
docs.fredliang.cn
cdn.blog.fredliang.cn
wiki.hackday.fredliang.cn
sms.fredliang.cn
blog.fredliang.cn
news.api.fredliang.cn
g.cdn.fredliang.cn
images.fredliang.cn
cdn.blog.fredliang.cn
cdn.blog.fredliang.cn
picolo.ai
*.frp.fredliang.cn
oldblog.fredliang.cn
manager.fredliang.cn
dashboard.fredliang.cn
cloud.fredliang.cn
bluedoc-storage.fredliang.cn
kibana.fredliang.cn
open.fredliang.cn
open.fredliang.cn
cdn.blog.fredliang.cn
api.fredliang.cn
open.fredliang.cn
manager.fredliang.cn
manager.fredliang.cn
blog.fredliang.cn
204.fredliang.cn
storage.fredliang.cn
cdn.blog.fredliang.cn
open.firebase.fredliang.cn
cdn.blog.fredliang.cn
data.fredliang.cn
deploy.fredliang.cn
www.fredliang.cn
static.fredliang.cn
dashboard.fredliang.cn
www.christinahsuholland.com
deploy.fredliang.cn
fathom.fredliang.cn
*.fredliang.cn
oldblog.fredliang.cn
open.fredliang.cn
wiki.fredliang.cn
cdn.blog.fredliang.cn
storage.fredliang.cn
hugoblog.fredliang.cn
static.fredliang.cn
fmt.fredliang.cn
*.fredliang.cn
fmt.fredliang.cn
hr.fredliang.cn
open.source.fredliang.cn
hr.fredliang.cn
hackdayfiles.fredliang.cn
manager.fredliang.cn
fmt.fredliang.cn
data.fredliang.cn
*.fredliang.cn
cdn.blog.fredliang.cn
upload.fredliang.cn
fredliang.cn
image.appsmade4u.com

Certificate

The complete raw certificate details for *.fredliang.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY0JU5rF4+KjoSa4CmOW
GvukM8TIbnrXkHAfeGPN9AZwcjNXOinLH/Wn4hz/+/YjBM7W7MmNvps5nruUacFg
qXB5nYKpgzNBpCis2b9yRACJcaMO6skBlcmU+vql+yMDhkiFSTbOIv6ba9uXd+nF
ujjLS1/UXzcKVI3QcFUDTwC2sWYIkZ0D2yaoRHYM7w7e596y/9xfOT9hB3zUoWdU
ZuKB2D8YB1G87XNY46CJNFy+k3otZUCZR/lN/Bb7cod1+s874VwTfxFphQc0d6Q8
ZrhKLEGQMkUVhbLZJmJkaa9Rllu8ZQz2WgJvDe+cLqGNHBuZt4a6VF52rOKRuy+O
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35966256458692650406955572682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 02:53:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 02:53:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fredliang.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25443446954851298582505964154005864149619815617454202936374725394330108978298239508660592430174375743593056864842814810801342092230721087506400717343267468506701714261458509752837431856874478202773393777837827876454299410325665811784143692542101727289262830614283141960641509584007168429540100055220556932327702164609903768723498383778396355166389905258359592571568757817271274862089632191194733046294570925302046033726597262639686405762929962546890235968924083507872622487206509182098015089218831637764141130499320687870459960338634846753071283388595918151467457626790829122459759294742570716178673581938611676221141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fredliang.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredliang.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							173bf9dacfd99f578a148dda0204c531beb89f70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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