*.uralairlines.ru

- JOINT STOCK COMPANY URAL AIRLINES -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2e:67:e4:86:1d:d6:dc:47:61:39:59:17 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

JOINT STOCK COMPANY URAL AIRLINES

Organization: JOINT STOCK COMPANY URAL AIRLINES
State / Province: Sverdlovskaya oblast
Locality: Ekaterinburg
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:67:e4:86:1d:d6:dc:47:61:39:59:17
Serial Number (int): 14361908984774128193771231511
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 36:44:36:72:fa:c7:db:da:6c:c6:1b:10:6d:d8:5d:54:5b:23:59:82
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 0d:f7:f9:b2:82:c3:27:72:1d:63:b5:eb:b9:17:31:f2:0a:7c:46:fe
Fingerprint (sha256): 06:78:61:b7:fb:fb:e6:dd:07:8e:b0:76:5b:70:5d:6b:36:dd:c7:91:09:39:41:7b:7e:0b:77:69:a0:81:48:8e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.uralairlines.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uralairlines.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uralairlines.ru
uralairlines.ru

Other certificates including the domain name uralairlines.ru

(limited to 100 certificates)
booking.uralairlines.ru
*.uralairlines.ru
info.uralairlines.ru
*.uralairlines.ru
u6ibe.book.uralairlines.ru
mail.uralairlines.ru
*.uralairlines.ru
*.card.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.uralairlines.ru
payment.uralairlines.ru
book.uralairlines.ru
service.uralairlines.ru
snica20gl.wpc.edgecastcdn.net
*.uralairlines.ru
info.uralairlines.ru
apps-tst.uralairlines.ru
*.uralairlines.ru
snib12fgl.wpc.edgecastcdn.net
booking.uralairlines.ru
*.card.uralairlines.ru
apps.uralairlines.ru
*.uralairlines.ru
etm.uralairlines.ru
book.uralairlines.ru
apps-tst.uralairlines.ru
onlinebooking.uralairlines.ru
book.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
pgquni.uralairlines.ru
etm.uralairlines.ru
info.uralairlines.ru
service.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
snic7f7gl.wpc.edgecastcdn.net
*.uralairlines.ru
etm.uralairlines.ru
service.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
*.uralairlines.ru
etm.uralairlines.ru
snib12fgl.wpc.edgecastcdn.net
booking.uralairlines.ru
*.uralairlines.ru
*.uralairlines.ru
payment.uralairlines.ru
etm.uralairlines.ru
booking.uralairlines.ru
book.uralairlines.ru
booking.uralairlines.ru
etm.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
payment.uralairlines.ru
etm.uralairlines.ru
flysmart.uralairlines.ru
payment.uralairlines.ru
book.uralairlines.ru
payment.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
service.uralairlines.ru
info.uralairlines.ru
app-sec.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
service.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
etm.uralairlines.ru
flysmart.uralairlines.ru
book.uralairlines.ru
etm.uralairlines.ru
service.uralairlines.ru
apps.uralairlines.ru
book.uralairlines.ru
payment.uralairlines.ru
etm.uralairlines.ru
etm.uralairlines.ru
*.uralairlines.ru
mail.uralairlines.ru
mail.uralairlines.ru
etm.uralairlines.ru
etm.uralairlines.ru
*.uralairlines.ru
etm.uralairlines.ru
mail.uralairlines.ru
etm.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.book.uralairlines.ru
booking1.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.uralairlines.ru
etm.uralairlines.ru
pgquni.uralairlines.ru
u6ibe.book.uralairlines.ru
booking.uralairlines.ru
flysmart.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
info.uralairlines.ru

Certificate

The complete raw certificate details for *.uralairlines.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+jLJA1Cs86lLA4wPVJ
V2SJRGDTvlUi0c00Sd2RH4n4UuWqWGbEE83tn0C0ysYpH0Noc1EiTJsFnHtk8eVd
awUmxeJToExHHj452toPbrhjEH8Hk5ahbe7S0Wx1d2+P+Gd/BowJ+hedq5IGjrYH
7jxLFC+gQWIVNh8qldt7m2xORjIyY857S+ISrXEAAposQtRzM19MUCFBZTeEkhNp
ff2727LzW6UgSLu8SZW1ahZw/9MBWGV4s9BmJFSukmt/nlIKxWfqNpEtUdAl0Spc
zzLBu7N1iTGkCXPU787ifSKrohK2EQdq2H6zBnZ9JqFRH7NjPqBeobFEHgZbic8i
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14361908984774128193771231511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 06:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-28 06:11:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sverdlovskaya oblast'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ekaterinburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JOINT STOCK COMPANY URAL AIRLINES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uralairlines.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23669503375786642020144554835434547193949873198506164962338352939798619135064510627279630735641195457795650783941786291926062350062196448544707665235926480491003844276705422400515261769287108601704558012990577521192514855143165453041668911135801205223152800634805555869987718953766102174023699868521946578924518868014923642218726604858382234418084129889484354953002398711562389833534217536981197582687820672548967376779756688100693404012979918546775714312683304434096229167760558254146989540119454042949011317480857463917132473211522907906545407357083492939580490728759582119621750669807007754100784585487054080516697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uralairlines.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uralairlines.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36443672fac7dbda6cc61b106dd85d545b235982
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c0f67308c000004030047304502200162e3a9c262df67f3c22340d7c27adf4bbfb93088f19a6fbc529158476429df022100d64f3290841325e069004810a1c1a576d6562dc4eb12cad5470697a3cad05f7c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0f673365000004030047304502206434d6945399a6ce1f2410bf7426c825126641c9da3b6aaa119dcea53acfb82f022100cd56bda2f5141a4e8f441865f580e08fb19d0542b6c1ae2b5c27b38ec3f249a700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0f6730790000040300473045022100ebb43ab414e700c9ebdfb4192374069c94f21474b90a2457506bf2c39f57036c02204f460353502aae3553ccd7611ef30387644b929b3af24c2f2ed9fa3bba08863e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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