www.lilballerine-krasnodar.ru

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 50:0b:06:5a:95:2b:85:16:7a:ef:0c:05 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lilballerine-krasnodar.ru,OU=Domain Control Validated,C=RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:0b:06:5a:95:2b:85:16:7a:ef:0c:05
Serial Number (int): 24772128974878061537883261957
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 3e:51:86:b5:37:c8:8b:a9:b0:30:92:ce:b5:e9:4a:df:46:a5:b1:a7
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): f4:d1:96:e2:43:ed:af:a1:ba:05:0e:d9:5b:a8:f2:35:b1:99:c6:a2
Fingerprint (sha256): 00:00:84:65:76:e4:b4:86:bf:73:78:96:e2:ab:7e:fa:36:b5:b1:c4:09:57:24:ce:30:eb:9d:4a:20:2a:c1:6b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.lilballerine-krasnodar.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lilballerine-krasnodar.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lilballerine-krasnodar.ru
lilballerine-krasnodar.ru

Other certificates including the domain name lilballerine-krasnodar.ru

(limited to 100 certificates)
www.lilballerine-krasnodar.ru
www.lilballerine-krasnodar.ru
www.lilballerine-krasnodar.ru
www.lilballerine-krasnodar.ru
www.lilballerine-krasnodar.ru
www.lilballerine-krasnodar.ru

Certificate

The complete raw certificate details for www.lilballerine-krasnodar.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24772128974878061537883261957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-14 10:28:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 10:28:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lilballerine-krasnodar.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768563992711294634423807184155548569030636077903594645053104272670630200386447459705449027687984438414893466074793012869202121426222206317367357773080164357576963230703618178583885155539106022853161147226996179039548708346146481608649472874920073667423499653684135906608193302285565459984660200947811909501515909455026681454353046451153072961372918195649792215759651630333520276095147369707882307775543169151486672043103315943014547258262410296913438589277502570574599455558351703126327597239729906957147721458049718597644566610664817012112955967547089945566107498609333238615992875117078627821387480730150389751858231988627240008689466534475208858109183025091755156165196224709581063908283306521102869742504602586006463310508261805181170409562727787778851720630651695529717844376994791042719092500840707571541688377287582016717033110919540653171049603605400366337030341402777697840262595513354433051350620138070844731929639209371899417897535893558982554636204782447154168743103381341484107145304353924366375818647739154536398416635081067646507649245966071146456306128804928714348969635426284480199679324243444366322125966604182401401544687180274437329937062440274525166436943770821326788888398598352159276902728903440325379395911729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lilballerine-krasnodar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilballerine-krasnodar.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e5186b537c88ba9b03092ceb5e94adf46a5b1a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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