pass.mosreg.ru

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 7d:14:49:ec:58:95:6b:aa:29:c3:fe:bd was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pass.mosreg.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:14:49:ec:58:95:6b:aa:29:c3:fe:bd
Serial Number (int): 38710153836628403479103405757
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 63:96:4a:60:0d:83:f2:be:a3:41:16:b7:4d:4d:2f:d2:24:70:f3:a6
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): d7:f9:aa:0c:94:8f:1b:22:01:a7:87:53:cc:77:6a:b6:22:e8:bd:e3
Fingerprint (sha256): 03:c3:b6:95:22:7c:80:8a:d9:3f:a0:91:0f:f2:03:da:fd:c6:d0:f3:2f:6b:fc:c6:ee:d6:45:aa:c3:f2:26:a9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate pass.mosreg.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pass.mosreg.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pass.mosreg.ru

Other certificates including the domain name mosreg.ru

(limited to 100 certificates)
docs.mosreg.ru
guv.mosreg.ru
help.dnevnik.ru
sdc.platform.mosreg.ru
klh.mosreg.ru
*.reb.mosreg.ru
pdks.mosreg.ru
mf.reb.mosreg.ru
msh.mosreg.ru
www.atk.mosreg.ru
*.mef.mosreg.ru
isogd.mosreg.ru
ugd.mosreg.ru
socuslugi.mosreg.ru
ud.mosreg.ru
*.sport.mosreg.ru
mosreg.ru
www.zags.mosreg.ru
isogd.mosreg.ru
monitoring.mosreg.ru
mio.mosreg.ru
*.budget.mosreg.ru
lytkarino.mosreg.ru
tasks.mosreg.ru
www.mef.mosreg.ru
pushchino.mosreg.ru
kadry.mosreg.ru
mail.omsu.mosreg.ru
volokolamsk.mosreg.ru
pass.mosreg.ru
help.pik.mosreg.ru
auth.elib.mosreg.ru
www.guip.mosreg.ru
mz.mosreg.ru
bal.msr.mosreg.ru
kt.reb.mosreg.ru
www.mo.mosreg.ru
docs.mosreg.ru
www.gatn.mosreg.ru
gorskoe.mosreg.ru
tasks.mosreg.ru
news.mosreg.ru
www.klh.mosreg.ru
remote.mosreg.ru
mf.mosreg.ru
*.ugd.mosreg.ru
msh.mosreg.ru
dzks.mosreg.ru
gs.mosreg.ru
*.dev.dk.mosreg.ru
www.mz.mosreg.ru
upss.mosreg.ru
guv.mosreg.ru
ank.mosreg.ru
dolgoletie.mosreg.ru
dobrodel.mosreg.ru
news.mosreg.ru
dolgoletie.mosreg.ru
upsh.mosreg.ru
zags.mosreg.ru
beta.uslugi.mosreg.ru
uzpp.mosreg.ru
lms.gossluzhba.mosreg.ru
mo.mosreg.ru
mst.mosreg.ru
dop.mosreg.ru
invest.mosreg.ru
www.mio.mosreg.ru
certificate.cogu.mosreg.ru
klim.msr.mosreg.ru
*.mp.mosreg.ru
vpn.mosreg.ru
isogd.mosreg.ru
roshal.mosreg.ru
subbotnik.mosreg.ru
dolgoletie.mosreg.ru
admin.digital.mosreg.ru
isoik.mosreg.ru
minenergo.mosreg.ru
ugd.mosreg.ru
pik.mosreg.ru
docs.mosreg.ru
news.mosreg.ru

ktc.mosreg.ru
web.mail.mosreg.ru
remote.mosreg.ru
*.msr.mosreg.ru
roshal.mosreg.ru
www.ktc.mosreg.ru
www.mst.mosreg.ru
gs.mosreg.ru
*.reb.mosreg.ru
webconf.mosreg.ru
www.politika.mosreg.ru
mtdi.mosreg.ru
tdn.mosreg.ru
*.reb.mosreg.ru
help.dnevnik.ru
renovation.mosreg.ru

Certificate

The complete raw certificate details for pass.mosreg.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38710153836628403479103405757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 06:31:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-17 06:31:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pass.mosreg.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641668901785590569373881397756527672844568651728607763559325584622770242221399182006773912637226920998467185909781437460240796819180936086438250183335163173339203994010076517486083722049945115831896510978441804845809166985816614531022849098304597658212172251991842369772087252736045279067781469206200897382818648398128358069719721102169260626737823065938011989059467079779239932091824651507505801748736623826198978436822132880783316106306766152383587024917920532846806194411121656345152802839088422234243756443288960055835529004823654019525300794621973709208881288290924309217270686607235471902539479874835203608977990847734879780822077787707545705474556262051048319061165624495045750981710150538703604497614816688701504846292085623801377651088112889373975648419854555483154746061094646972928410892081686463835764065005698139981190012580100615430548974720949026298805263585750306894630430208276675445028159459851825557141278843036389079927791224806239391719518896557824063980861080535179416561557537407148582996224542530212584514795900485853334398927309186464789947210531545341940501703969004791344332763326911852765158051478922220372939882273541623478982097536890588568657945880987632502138766687517061328449315788176144203700048477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass.mosreg.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63964a600d83f2bea34116b74d4d2fd22470f3a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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