*.georoute.ru

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0e:76:75:20:a1:6b:a2:39:15:96:15:29 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.georoute.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:76:75:20:a1:6b:a2:39:15:96:15:29
Serial Number (int): 4475996503019232140631348521
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: cd:53:a5:2b:9e:0c:5c:e1:3e:9d:f7:4b:b8:c4:0b:fe:92:9b:0a:b2
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c6:33:7a:1c:57:fb:76:ee:a1:48:a2:d3:d2:c0:3d:fa:de:44:a9:32
Fingerprint (sha256): 01:b8:2c:89:2e:28:f9:dd:44:21:1b:0d:16:ad:b4:02:87:18:45:98:cb:85:c2:e9:05:ff:21:ac:5b:38:1a:29

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.georoute.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.georoute.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.georoute.ru
georoute.ru

Other certificates including the domain name georoute.ru

(limited to 100 certificates)
cards.georoute.ru
*.georoute.ru
*.georoute.ru
ws.georoute.ru
*.georoute.ru
api.georoute.ru
capi.georoute.ru
www.georoute.ru
demo.georoute.ru
georoute.ru
crm.georoute.ru
demo.georoute.ru
cards.georoute.ru
www.georoute.ru
www.georoute.ru
www.georoute.ru
ws.georoute.ru
www.georoute.ru
georoute.ru
cards.georoute.ru
*.georoute.ru
api.georoute.ru
cards.georoute.ru
*.georoute.ru
georoute.ru
api.georoute.ru
*.georoute.ru
demo.georoute.ru
*.georoute.ru
*.georoute.ru
api.georoute.ru
crm.georoute.ru
api.georoute.ru
ws.georoute.ru
capi.georoute.ru
demo.georoute.ru
crm.georoute.ru
capi.georoute.ru
demo.georoute.ru
cards.georoute.ru
capi.georoute.ru
ws.georoute.ru
demo.georoute.ru
capi.georoute.ru
ws.georoute.ru
capi.georoute.ru
georoute.ru
www.georoute.ru
demo.georoute.ru
demo.georoute.ru
capi.georoute.ru
ws.georoute.ru
demo.georoute.ru
ws.georoute.ru
www.georoute.ru
ws.georoute.ru
crm.georoute.ru
*.georoute.ru
crm.georoute.ru
ws.georoute.ru
demo.georoute.ru
cards.georoute.ru
capi.georoute.ru
api.georoute.ru
cards.georoute.ru
cards.georoute.ru
demo.georoute.ru
*.georoute.ru
api.georoute.ru
*.georoute.ru
*.georoute.ru
api.georoute.ru
*.georoute.ru
cards.georoute.ru
*.georoute.ru
*.georoute.ru
crm.georoute.ru
cards.georoute.ru
ws.georoute.ru
crm.georoute.ru
demo.georoute.ru
api.georoute.ru
capi.georoute.ru
api.georoute.ru
georoute.ru
www.georoute.ru
demo.georoute.ru
www.georoute.ru
api.georoute.ru
api.georoute.ru
ws.georoute.ru
crm.georoute.ru
*.georoute.ru
capi.georoute.ru
*.georoute.ru
api.georoute.ru
help.georoute.ru
ws.georoute.ru
capi.georoute.ru
*.georoute.ru

Certificate

The complete raw certificate details for *.georoute.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4475996503019232140631348521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 08:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 08:21:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.georoute.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654274233568731700521699337492693994459966466737107233933840582915209646163565957056940884613553003874810543962588507382386521840300717944212249491093643905173397606516433996842406366087920227812679320302576524883107435093734965708238478113976347243887149366259013616582879911662046945806001452812522376613250373095291108583534665895870318336411740722720498842560803710822250914523353847276917178876355384061780784743026454915255562278562310361875254474748615536003337060071926208275601012303659940015105741870958569160397568060854483292074695946429041259288505385798320898457126430159738873218861624518255647495005198959263576059489989875209217990975738097063372656034371134046916268491049228828701885554911139939785465104993231258277928046308408279955059893254621230925883501922582524417404936237849408311843336822091515410420807894152776837157950740552517116246266210161275661201799239354435396700257535988877401763186725851448643979719131247392744032551386550313833943506714928973321125630297012250241358029729273611668180696814125128400910125492985967980892621522031431146546849002065025426206093665052122711162599093073121379158707065753780838710814210147961562581543936834568028341201583533149514389443326843057783932609056833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georoute.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georoute.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd53a52b9e0c5ce13e9df74bb8c40bfe929b0ab2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002606bc401ab3cebf1dcbcdea5c80d9fe9d626a4b4ac5ea48c43f7b381e19d73e6672eb7ef730ead71462f9652104efce129b96d1091eb07485da4f05f46d90a0cdff60180d848ffcf18489ea61debc36532552713db84c2aad1933d9617805cd28002033d68a0738658a646082ebb1119fb58ff70efc9920691ee65711ea7b51abdcfc8c9e103b49ee0e3b74a9db7bea5f39cb2593c76b881f16e09dc25fe0f58bf5196847faadf529b0e3beab1d3e0f4be399d6de93e885f0aa5f20e8dbe2d9b3fd1ad1fc477e965a6b4c3f2519290c631c7dd0849e1fe6a145141baf28bf47589cd55cc342728df9bf87b674dae3418e4355283bcc97a7c35d62c8a78859bf