lk.dom.mos.ru

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 2d:8d:59:00:51:80:71:08:fb:24:3b:57:f4:06:50:66 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lk.dom.mos.ru

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:8d:59:00:51:80:71:08:fb:24:3b:57:f4:06:50:66
Serial Number (int): 60549178827052912068484643412678955110
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: ff:ce:1f:e5:bf:d2:83:28:68:bd:55:8a:3c:ed:37:12:ed:32:fa:e9
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 10:58:0e:54:1c:ec:a8:46:3f:52:fb:2a:d0:0d:53:8c:9f:e9:7d:8b
Fingerprint (sha256): 05:dd:78:f5:c8:9d:f6:7f:be:51:b0:c8:ec:de:cc:0f:58:eb:76:dc:c1:e2:b6:c8:ba:15:79:69:34:8a:af:e4

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate lk.dom.mos.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lk.dom.mos.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lk.dom.mos.ru

Other certificates including the domain name mos.ru

(limited to 100 certificates)
findme.mos.ru
sso.stroy.mos.ru
rzn1.mos.ru
repo.mos.ru
dgp28.mos.ru
dmp.bigdata.mos.ru
beta.alt.mos.ru
nesterenko.kamis.mos.ru
cp.mos.ru
digitaleconomy.moscow
gp107.mos.ru
obr-video-18.mos.ru
sp32.mos.ru
gp180.mos.ru
eis-mgi.mos.ru
*.mos.ru
gp107.mos.ru
*.cdn-dev.mos.ru
beta.alt.mos.ru
lk.dom.mos.ru
smicloud.tender.mos.ru
itpostavka.mos.ru
lk.dom.mos.ru
lk.dom.mos.ru
dgp28.mos.ru
create.mos.ru
auth.roads.mos.ru
study-sd.mos.ru
help.ct.mos.ru
*.tech.mos.ru
gormost.mos.ru
sp12.mos.ru
*.catalog.mos.ru
sp62.mos.ru
*.ws.eirc.mos.ru
gp22.mos.ru
edc.mos.ru
obr-video-09.mos.ru
uat.ag.mos.ru
suo.tender.mos.ru
gp115.mos.ru
jira.gkh.mos.ru
crowd.mos.ru
dgp99.mos.ru
spk.mos.ru
donor.mos.ru
uat.vetas.mos.ru
servicesmmc.mos.ru
obr-video-33.mos.ru
obr-video-04.mos.ru
sp12.mos.ru
lk.dom.mos.ru
payparking.mos.ru
help.ct.mos.ru
*.tdm.mos.ru
api.roads.mos.ru
dgp10.mos.ru
emp.mos.ru
smd.mos.ru
admin.sudir2.mos.ru
sp12.mos.ru
artifactory.emias.mos.ru
transport.mos.ru
sc.mos.ru
uat-hr-dzm.mos.ru
lk.parking.mos.ru
vgb.mos.ru
dgp131.mos.ru
dgp99.mos.ru
help.ct.mos.ru
aisgin.mos.ru
lk.dom.mos.ru
gp219.mos.ru
*.eirc.mos.ru
pay.mos.ru
report2010-2017.transport.mos.ru
dtm.mos.ru
*.mos.ru
gp67.mos.ru
darwin.catalog.mos.ru
akfakt.ru
edu.tender.mos.ru
findme.mos.ru
obr-video-05.mos.ru
gp219.mos.ru
expertiza.mos.ru
i.transport.mos.ru
crowdspace2.mos.ru
dgp10.mos.ru
ppforum.tender.mos.ru
api.cdp.mos.ru
rnip.mos.ru
www.um.mos.ru
forskar.ru
survey.eaist.mos.ru
*.mos.ru
gp19.mos.ru
sp32.mos.ru
md.mos.ru
*.bi.mos.ru

Certificate

The complete raw certificate details for lk.dom.mos.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60549178827052912068484643412678955110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-25 18:11:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-25 18:11:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lk.dom.mos.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706703930464374783996219548499840605639286117415605682097469394215949862255438725244059997565645790623306030336648950332076151716021572387042385091100426576096840341223637810054524295392712701815187541989745784935547624468924481776776187715042730967193205569559206532190065007413605544896698221987238870530464258224498360953657538284595411230948643124691816174181177997010697080073949233592585969373309540529255627496629346494263215525373431328794345104979508291820331447162307075070307939437378593781574881494308929324422270273512772401945379715911533935352750414982388314084204234686060853232214665850293885770508355269439875672840028057278368114139651193315021729297871010779913318649590577686941672234700650581878288413353330170188055780881305204583360621273948851329584391879044415761685394674820712703474557700847548246751057507756872070239976026777726087442513260255705214622227373024317773927561766784053205019443119992381220955999702105276576357201932870975408985450825215442404997407713092358621990441144537974731950086277973923999805211981959932568469635857686149339788201762921781931028196466204215208606335875913304166250013084808187797159031525258562396707189135996924225086400845631159252249566079874704455357192119867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffce1fe5bfd2832868bd558a3ced3712ed32fae9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lk.dom.mos.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000154e9483da000000403004830460221008a2f7272a97dbd6ce12c72d05770f4791c69acd0d8b0cdb12de2f17c21d26c1e022100fdd18de338c5168c42652d3ed29428ed97470064e20ce706facaf81cdf6a6f6b007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000154e94840eb0000040300473045022100911d150f85000d4487873e7d699deb4904a95d1bed3687dcf34f997062030b11022059c435422f93922f388384348107245194f3e6c3f6ab59963e40445b79122167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007be57a13266cb6ba9accc7233e7887cb3d0a37283809199413512a9c79616272d25ff39072552490d9957f645da2b955005dd05e5028824360d0122d9eca255de836685359ccd9a42a74f384fc76fd89ba58ec177c6a7f151a33438d0214a9ac06f8e50831fda2dbf71bf26f20f50a61e6bb8ce2d0bad9e3217d9dc471bd4fac30d622b9973a7d46337a7b983c268752d709143d12c16d410b4a09e13e388ff3e15669049f93b224a80b2af3434016f5576e92eb2e901cdcbdee0ddf1a0985db0f80b893243aee6d7caf4fd44b1a2e872f7f2798b3a16088c4df96d016f0a760d63a23c13cd3865ef64c059e09775594a54c46d8e2ba1685cee8d3b98963deec