*.skoltech.ru

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0b:1c:0d:fa:16:1a:36:81:9e:03:4f:e8:82:2f:ac:d8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.skoltech.ru

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:1c:0d:fa:16:1a:36:81:9e:03:4f:e8:82:2f:ac:d8
Serial Number (int): 14767175750878885499526305743375412440
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:4d:e5:bb:03:84:11:9f:d8:2e:02:58:66:e9:52:c8:aa:01:68:d9
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): f0:00:d3:81:fe:52:1b:07:ec:db:db:13:57:68:96:b3:1e:9c:9d:12
Fingerprint (sha256): 00:52:68:47:73:24:94:da:15:09:92:3e:aa:b1:ff:38:35:12:cf:87:a4:67:f4:80:c8:21:b5:32:49:70:1f:9f

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.skoltech.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.skoltech.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.skoltech.ru
skoltech.ru

Other certificates including the domain name skoltech.ru

(limited to 100 certificates)
vpn2.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
skt-ise-02.skoltech.ru
expwe.skoltech.ru
vpn1.skoltech.ru
cig.skoltech.ru
sber-hackathon.skoltech.ru
skt-guest-cwa-01.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
student.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
srv-vc-jabber-01.skoltech.ru
join.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
mlss2019.skoltech.ru
proxylib.skoltech.ru
pm.skoltech.ru
hse.skoltech.ru
vpn2.skoltech.ru
vpn2.skoltech.ru
srv-edu-01.skoltech.ru
box.skoltech.ru
*.skoltech.ru
mlss2019.skoltech.ru
mail.skoltech.ru
skt-ise-01.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
srv-edu-01.skoltech.ru
vpn.skoltech.ru
vpn1.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
cb.skoltech.ru
sber-hackathon.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
smiles.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
vpn1.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
cig.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
contour.skoltech.ru
pm.skoltech.ru
global.skoltech.ru
*.skoltech.ru
esports.skoltech.ru
contour.skoltech.ru
truestory.skoltech.ru
pm.skoltech.ru
ise01.skoltech.ru
esports.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
mlss2019.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
01math.skoltech.ru
sber-hackathon.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru

Certificate

The complete raw certificate details for *.skoltech.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx4te9mGbe3L2ypy8UCZ
3x+Sim0qr0koqbClAdfEXtcc44hNcytj6w97chnpsFbdFLjVy/iR31cijZDeX6m2
bFsCpWYmvdl+TrI6X7qlVDf6fF9z/fYSnHFWaDu1nIl6Z7+PQZqX0A2A6x+6Wy70
Lm7NPXC+67RyThveMXln1aCuGOsnWrHrw0ADThGLJ6j26FyTO5+zX+pB1Sg4WOU1
yJOwQw9cgXjgtAbih/+AsKQ3t5dZj+WltQtVbAtOxXs8Irw3XLlYZ5grLdQ6AY01
aacT28cAQSc1ScpoUqai4EQ6YoRwzDmG5ijhYo6ZCcTbyEd9xV5lVYeoZcqGHJ+a
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14767175750878885499526305743375412440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.skoltech.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21096678093553435533310495897781059114738512859528102962782949317642538961413127223534454507476823363202193565563903997778366317705272199045270447300999038413036421714906966642292756755140109718643226149718569194525975997902687832591058519836510736624957381534165745937722336228277695736847976714667001814978930388932724171076249333520631754151647248365267278396272656975948166569902451302241346480354583701248667317060106171944315337623084148162752811868719411297552677149909509002155795498792249277506452276825044893531789332765919635363791770996944629962139037245713743798927844918768891591138191683828492516956923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							984de5bb0384119fd82e025866e952c8aa0168d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skoltech.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoltech.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165d2b96d1d0000040300463044022070ce749111e5ca534b2db6a7634e5141dcda31d8aee0557311ff9ab0a27a25f902200924b7b8a0dd44b754fe14b261d038008efc7d06e504b1b12487ddeb7ef488ba0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165d2b96dfc00000403004730450220328cb521bc0461824910034d52e9a5911bb026a4dbdab3fa017e91980ebf93fd022100a0015ab866cf2b05199687767eccd1a77014ecda3e4dbaa6931a9adb77043c5e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165d2b96ef20000040300473045022008f5f1becde1f6a6e89df7fb17e14e25ab8a34da2eac487efc87e3effc046b600221008318a10ff07151b787386ecff96430fbd548808348fb219acb0abab4ff071c8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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