DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mail.mxhichina.com · 47.246.146.253:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=CN ST=ZheJiang L=HangZhou O=Alibaba (China) Technology Co., Ltd. CN=*.mxhichina.com
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 OV TLS CA 2024
Valid from
2025-11-27T06:26:20+00:00
Expires
2026-12-29T06:26:19+00:00
Days remaining
54
Serial (hex)
742706ECC56A312A37C23D85
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.mxhichina.com, DNS:mxhichina.com

SHA-256 fingerprint

C2:29:B8:17:09:7A:A7:79:E6:92:2D:1C:3C:64:92:07:28:C0:33:13:C1:46:F8:75:77:F5:13:91:9A:4B:E0:28
Certificate extensions & PEM
keyUsage
Digital Signature, Key Encipherment
basicConstraints
CA:FALSE
authorityInfoAccess
CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3ovtlsca2024.crt OCSP - URI:http://ocsp.globalsign.com/gsgccr3ovtlsca2024
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2 CPS: https://www.globalsign.com/repository/
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/gsgccr3ovtlsca2024.crl
subjectAltName
DNS:*.mxhichina.com, DNS:mxhichina.com
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
authorityKeyIdentifier
DA:D3:A8:08:48:0C:34:37:58:EE:E5:A7:75:2E:59:FC:D6:DC:3C:38
subjectKeyIdentifier
62:75:F4:29:1F:E5:EF:CA:7A:71:69:4A:0D:B3:A7:54:82:75:FC:A6
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Nov 27 06:26:23.961 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:16:1E:46:55:21:4B:D3:E0:14:C3:2F:22: 00:A1:B1:DA:77:7D:FA:61:BE:98:0A:7D:C8:2D:4C:03: EA:6C:10:C7:02:21:00:B7:67:04:2E:32:B7:55:93:E1: F9:6A:B8:ED:9C:24:CE:11:90:89:05:2E:E1:95:3C:8F: A1:76:9F:D0:EC:F8:52 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : AC:AB:30:70:6C:EB:EC:84:31:F4:13:D2:F4:91:5F:11: 1E:42:24:43:B1:F2:A6:8C:4F:3C:2B:3B:A7:1E:02:C3 Timestamp : Nov 27 06:26:23.956 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:66:BF:30:E3:A8:48:63:4F:B2:99:50:7F: E4:D9:C4:0E:60:D7:DB:C7:FD:12:BE:78:04:E4:8C:D4: 48:D6:94:3B:02:20:6D:43:95:D2:2C:F3:DA:11:4E:60: 6D:21:81:A1:3A:41:7E:B2:28:32:83:02:C6:02:9B:22: 71:6A:8C:ED:97:D1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Nov 27 06:26:23.954 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:A1:15:0D:09:80:96:EB:59:24:39:83: F0:A9:FC:E7:AD:7F:75:D9:64:4F:99:1C:E6:89:7A:1E: 58:59:50:73:0C:02:20:7A:C0:80:3E:04:88:E6:25:51: 84:9F:11:D4:52:D0:83:27:62:7B:D9:55:7D:1D:8E:07: 7A:65:B2:7D:80:F2:B6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-11-05T04:33:45+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign GCC R3 OV TLS CA 2024
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2024-09-18T03:14:38+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
863
Serial (hex)
81E5AB98E46F35B91C2FFA178718C85A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

99:6B:B8:1F:16:1E:1D:AC:9A:39:39:AB:7A:42:B4:13:1D:6D:CF:BE:6E:0D:A4:B5:A6:E1:9B:5C:87:01:84:2A
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
DA:D3:A8:08:48:0C:34:37:58:EE:E5:A7:75:2E:59:FC:D6:DC:3C:38
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3 CA Issuers - URI:http://secure.globalsign.com/cacert/root-r3.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: 2.23.140.1.2.2 Policy: 1.3.6.1.4.1.4146.10.1.2 Policy: 1.3.6.1.4.1.4146.1.20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Issuer
C=BE O=GlobalSign nv-sa OU=Root CA CN=GlobalSign Root CA
Valid from
2018-09-19T00:00:00+00:00
Expires
2028-01-28T12:00:00+00:00
Days remaining
449
Serial (hex)
01EE5F169DFF97352B6465D66A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

44:5E:EC:78:BC:61:21:50:44:A0:37:96:56:AA:2D:5D:B5:E4:2F:76:CB:70:B8:D1:4C:20:77:AA:94:3D:4E:BB
Certificate extensions & PEM
keyUsage
Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityKeyIdentifier
60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr1
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIETjCCAzagAwIBAgINAe5fFp3/lzUrZGXWajANBgkqhkiG9w0BAQsFADBXMQsw
CQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMH
Um9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTE4MDkxOTAw
MDAwMFoXDTI4MDEyODEyMDAwMFowTDEgMB4GA1UECxMXR2xvYmFsU2lnbiBSb290
IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNpZ24xEzARBgNVBAMTCkdsb2JhbFNp
Z24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJXaQeQZ4Ihb1wIO2
hMoonv0FdhHFrYhy/EYCQ8eyip0EXyTLLkvhYIJG4VKrDIFHcGzdZNHr9SyjD4I9
DCuul9e2FIYQebs7E4B3jAjhSdJqYi8fXvqWaN+JJ5U4nwbXPsnLJlkNc96wyOkm
DoMVxu9bi9IEYMpJpij2aTv2y8gokeWdimFXN6x0FNx04Druci8unPvQu7/1PQDh
BjPogiuuU6Y6FnOM3UEOIDrAtKeh6bJPkC4yYOlXy7kEkmho5TgmYHWyn3f/kRTv
riBJ/K1AFUjRAjFhGV64l++td7dkmnq/X8ET75ti+w1s4FRpFqkD2m7pg5NxdsZp
hYIXAgMBAAGjggEiMIIBHjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB
/zAdBgNVHQ4EFgQUj/BLf6guRSSuTVD6Y5qL3uLdG7wwHwYDVR0jBBgwFoAUYHtm
GkUNl8qJUC99BM00qP/8/UswPQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5nbG9iYWxzaWduLmNvbS9yb290cjEwMwYDVR0fBCwwKjAooCag
JIYiaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LmNybDBHBgNVHSAEQDA+
MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACNw6c/ivvVZrpRCb8RD
M6rNPzq5ZBfyYgZLSPFAiAYXof6r0V88xjPy847dHx0+zBpgmYILrMf8fpqHKqV9
D6ZX7qw7aoXW3r1AY/itpsiIsBL89kHfDwmXHjjqU5++BfQ+6tOfUBJ2vgmLwgtI
fR4uUfaNU9OrH0Abio7tfftPeVZwXwzTjhuzp3ANNyuXlava4BJrHEDOxcd+7cJi
WOx37XMiwor1hkOIreoTbv3Y/kIvuX1erRjvlJDKPSerJpSZdcfL03v3ykzTr1Eh
kluEfSufFT90y1HonoMOFm8b50bOI7355KKL0jlrqnkckSziYSQtjipIcJDEHsXo
4HA=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →