www.mz.mosreg.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:43:a1:e3:25:68:3c:04:8f:a5:12:20:00:b6:2e:8b:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mz.mosreg.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:43:a1:e3:25:68:3c:04:8f:a5:12:20:00:b6:2e:8b:eb
Serial Number (int): 333566618425102188704906672196737976667115
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:b9:d7:ab:d6:76:e9:8d:dd:b0:9c:db:b9:55:ed:f6:d3:ed:60:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:f4:54:6c:b4:61:f4:93:75:5a:a9:bc:71:95:8a:7a:c1:5e:be:6e
Fingerprint (sha256): 08:58:ef:65:dd:5f:c5:02:d5:66:64:6e:1f:87:2f:a0:97:44:38:a5:f6:51:c1:70:98:9e:b7:a2:2b:da:63:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mz.mosreg.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mz.mosreg.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mz.mosreg.ru

Other certificates including the domain name mosreg.ru

(limited to 100 certificates)
docs.mosreg.ru
guv.mosreg.ru
help.dnevnik.ru
sdc.platform.mosreg.ru
klh.mosreg.ru
*.reb.mosreg.ru
pdks.mosreg.ru
mf.reb.mosreg.ru
msh.mosreg.ru
www.atk.mosreg.ru
*.mef.mosreg.ru
isogd.mosreg.ru
ugd.mosreg.ru
socuslugi.mosreg.ru
ud.mosreg.ru
*.sport.mosreg.ru
mosreg.ru
www.zags.mosreg.ru
isogd.mosreg.ru
monitoring.mosreg.ru
mio.mosreg.ru
*.budget.mosreg.ru
lytkarino.mosreg.ru
tasks.mosreg.ru
www.mef.mosreg.ru
pushchino.mosreg.ru
kadry.mosreg.ru
mail.omsu.mosreg.ru
volokolamsk.mosreg.ru
help.pik.mosreg.ru
auth.elib.mosreg.ru
www.guip.mosreg.ru
mz.mosreg.ru
bal.msr.mosreg.ru
kt.reb.mosreg.ru
www.mo.mosreg.ru
docs.mosreg.ru
www.gatn.mosreg.ru
gorskoe.mosreg.ru
tasks.mosreg.ru
news.mosreg.ru
www.klh.mosreg.ru
remote.mosreg.ru
mf.mosreg.ru
msh.mosreg.ru
gs.mosreg.ru
www.mz.mosreg.ru
upss.mosreg.ru
guv.mosreg.ru
dolgoletie.mosreg.ru
dobrodel.mosreg.ru
dolgoletie.mosreg.ru
beta.uslugi.mosreg.ru
uzpp.mosreg.ru
lms.gossluzhba.mosreg.ru
mo.mosreg.ru
mst.mosreg.ru
dop.mosreg.ru
invest.mosreg.ru
www.mio.mosreg.ru
certificate.cogu.mosreg.ru
klim.msr.mosreg.ru
vpn.mosreg.ru
isogd.mosreg.ru
roshal.mosreg.ru
subbotnik.mosreg.ru
dolgoletie.mosreg.ru
isoik.mosreg.ru
minenergo.mosreg.ru
ugd.mosreg.ru
pik.mosreg.ru
docs.mosreg.ru

ktc.mosreg.ru
web.mail.mosreg.ru
remote.mosreg.ru
*.msr.mosreg.ru
roshal.mosreg.ru
www.ktc.mosreg.ru
www.mst.mosreg.ru
gs.mosreg.ru
*.reb.mosreg.ru
webconf.mosreg.ru
www.politika.mosreg.ru
tdn.mosreg.ru
*.reb.mosreg.ru
help.dnevnik.ru
renovation.mosreg.ru
www.gzhi.mosreg.ru
pushchino.mosreg.ru
dom.mosreg.ru
112.rm.mosreg.ru
*.secure.mosreg.ru
dev.vmeste.mosreg.ru
chekhov.mosreg.ru
vmeste.mosreg.ru
docreg.reb.mosreg.ru
rgis.mosreg.ru
new.dop.mosreg.ru
s.pik.mosreg.ru

Certificate

The complete raw certificate details for www.mz.mosreg.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D4YA/f2276+PSQ+RJQm
C2L4fPWlGLkYUxga7DWAPBuiylsIpnhOkm0c4wjyb+6lwva8WiOzz2J0JIl42up0
5E1DwiMDxjGhFham1ec7MN1nKxTF5qeK1mOpIliJZCtz15zVQG52X/yPESH2JT4T
KpdDuRqzB6nE4GKaA6q+sDXXsHBkC4wqchr3c/9fQQSNVjpFteggzUh0ovogA3HQ
u74m9yxCEmVQNOuurwY1hZcGcctk/BrzHjpdINcgDgpXg9P/qm2tgtpc7yOVnbfJ
Yuq0BQdZ02q8WlpjlvAxSS/Tc5ds/EnEgzqxAcZ8mS9J0nnO7w+BpMkbtG70AQVu
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333566618425102188704906672196737976667115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 07:13:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 07:13:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mz.mosreg.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27803046691726244807133745670121924596661811060234380723857675064440456950055646706084822296333331799751014354173810756869205541972987937505831087508190365123765953774301571600133577542945387322263628003455132384313119609762471776734399119689391844012031997354699901739451784712133521834533173377999572794085032680859957669263454779651345043833668515047247370998043245554953322209745532238572868588116505642827213750904600581831774896928259139101922581280517952716567747466247266250032297466709279249081297633069255959669255720295248977291185455164988227597270684167606534062834909845825575030179763899188053348281907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5eb9d7abd676e98dddb09cdbb955edf6d3ed60ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mz.mosreg.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f466afacd000004030047304502210087484dd5651058089263b4cf5b12b1cd67559cc47f060df3f6d96550d710bea1022056a110b17557630a919ef8b90f8f915ab54c4eb0039a6be5812acd264c5da781007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f466afabd0000040300473045022100d0f68d37d9b7361168820119b48f67255f356c05535e0cac8861cf026825650702203f823b223626763b399eae5e9d371ea53669bf23adf5d02c3126f406232cf842
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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