certifiedbuilds.kaspersky.ru

- AO Kaspersky Lab -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:7b:29:43:f0:ab:f8:29:04:e7:a0:32:3c:eb:ca:82 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AO Kaspersky Lab

Organization: AO Kaspersky Lab
Organization unit: IT
Locality: Moscow
Country: RU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7b:29:43:f0:ab:f8:29:04:e7:a0:32:3c:eb:ca:82
Serial Number (int): 16590225424583713023187540386935196290
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:85:79:c8:66:00:19:7c:54:ab:f4:af:58:70:23:94:fd:4b:1e:f8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 48:88:53:00:47:78:39:85:05:20:cf:d8:19:f5:20:60:5d:92:73:ad
Fingerprint (sha256): 01:44:ee:2b:9c:85:1e:82:6f:5b:e1:79:5b:11:10:7a:43:fc:55:94:7e:d5:b6:fb:43:7b:4e:34:ca:be:d4:d9

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate certifiedbuilds.kaspersky.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for certifiedbuilds.kaspersky.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certifiedbuilds.kaspersky.ru

Other certificates including the domain name kaspersky.ru

(limited to 100 certificates)
cert.kaspersky.ru
certifiedbuilds.kaspersky.ru
kaspersky.ru
migration.kaspersky.ru
advanced.kaspersky.ru
bestseller.kaspersky.ru
newvirus.kaspersky.com
kids.kaspersky.com
softkey.kaspersky.ru
b2b-compare.kaspersky.ru
support.kaspersky.com
softkey.kaspersky.ru
bestseller.kaspersky.ru
encyclopedia.kaspersky.com
academy.kaspersky.ru
photo.kaspersky.ru
www.kaspersky.ru
kaspersky.ru
store.kaspersky.ru
2020.kaspersky.ru
citilink.kaspersky.ru
kids.kaspersky.ru
small-business.kaspersky.ru
reestr.kaspersky.ru
academy.kaspersky.ru
noransom.kaspersky.ru
cert.kaspersky.ru
imf.kaspersky.ru
www.kaspersky.ru
kids.kaspersky.com
bestseller.kaspersky.ru
allsoft.kaspersky.ru
academy.kaspersky.ru
survival.kaspersky.ru
careersnew.catzwolf.ru
cloud.kaspersky.com
store.kaspersky.ru
whitelisting.kaspersky.com
support.kaspersky.com
careers.kaspersky.ru
softkey.kaspersky.ru
encyclopedia.kaspersky.ru
scan.kaspersky.ru
anti-ddos.kaspersky.ru
survival.kaspersky.ru
allsoft.kaspersky.ru
v-lozhkin.kaspersky.ru
NEWVIRUS.KASPERSKY.COM
business.kaspersky.ru
vpnhelp.kaspersky.ru
migration.kaspersky.ru
ksd.kaspersky.ru
kaspersky.ru
kids.kaspersky.ru
citilink.kaspersky.ru
keepcalm.kaspersky.ru
builds-by.kaspersky.ru
certifiedbuilds.kaspersky.ru
corployalty.kaspersky.ru
bestseller.kaspersky.ru
Spacelab.kaspersky.ru
imf.kaspersky.ru
my.kaspersky.ru
ics.kaspersky.ru
kosmos.kaspersky.ru
v-lozhkin.kaspersky.ru
support.imf.kaspersky.ru
citilink.kaspersky.ru
stop-agent.kaspersky.ru
eugene.kaspersky.ru
ksd.kaspersky.ru
imf.kaspersky.ru
allsoft.kaspersky.ru
care4money.kaspersky.ru
6.kaspersky.com
whitelisting.kaspersky.com
ksd.kaspersky.ru
acronis.kaspersky.ru
subscription.allsoft.kaspersky.ru
armor.kaspersky.ru
blog.kaspersky.ru
support.kaspersky.com
store.kaspersky.ru
advanced.kaspersky.ru
asaptest.kaspersky.ru
kids.kaspersky.ru
virusdesk.kaspersky.com
labshop.kaspersky.ru
best-admin-champ.kaspersky.ru
care4money.kaspersky.ru
support.kaspersky.com
support.kaspersky.com
os.kaspersky.ru
dream.kaspersky.ru
brainping.kaspersky.ru
sts.imf.kaspersky.ru
photo.kaspersky.ru
kids-conf.kaspersky.ru
os.kaspersky.ru
stop-agent.kaspersky.ru

Certificate

The complete raw certificate details for certifiedbuilds.kaspersky.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAaxOsPOiPAxehB9T2h5
ez3YkByq2dn1xDcozPfpJkr6d6szoQQ5jKff0eHr8XqI8pA+mNvp39dPLb4pB3ZX
mzvgO4DRh7Q+2C9Kg8WqcVQYlGVLn/ums5F1tuvLYYfdaDwlYGAflfhvi+zDtNyd
urhOZgNUT0TpKMr9oBCq/d7bFUipsmcRxb53vz1NqAXLVaTENjszWr5+RRRUXrSD
EHlPYqJgTAiDZxZRVb8V/bTpWexRv5DQ3Q1KHjDGOCnt3nzjxr1TvAW/QmsNbSJG
0JPonu73QzHYU9OFyVxY8saXzzhBEy3Fw9buq5l1uIJgkOsnVopPCHDYH//hDdtR
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16590225424583713023187540386935196290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Moscow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AO Kaspersky Lab'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certifiedbuilds.kaspersky.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21211335331869326682636473126483737075397906081314733802707029678289678020924535320535553494960936564612927486979605546963059193684646613807558841853734389407040869298887257074966770312049314751464730264186353767854309878515468334447342038689090388382364329483960114911145277757664134180343014899313265170688489770103373452303210234565311369876684537899412669559998854428402379836879854473100645782176317913232280818905017790534572412126440239090476328934862871993773286407557014400066449819159531431423606815734132716044085638325742362978075237522342688152877198033848908933760751716879198207897116399986583877145041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							798579c86600197c54abf4af58702394fd4b1ef8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedbuilds.kaspersky.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009982dc2308a71f7e14b58ac61a8442ed8a570204cffec799984c7df2c0607e87a7626ca7bfa08f5fa50cf3344c3f556fc6cace7028440792a338339f2692e160eeb3769f6929871f8298d4d94d14f4461d3db60e775eb0e921ca41b24feef07c2211d5e852a479feceed3b89950622888b98b6f2561125de3480d969e701b3860c1f43dbb5e5a887e25535d069a2901fbfa997363d56683097eafffeb644ae87a18177076c139224617b450e29e1cb599f92c401ad0852cba530446501563f132a13c657b6e8d35f0bbc7c3445abccc9ac711eedceaf7dfca1da2c8efaaa28a46a600323a1f2d18ccdc2bff24e48a3188f4b8ceb5db10a44ce40a084e9cd1b9e