kids.kaspersky.ru

- AO Kaspersky Lab -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6a:64:63:49:ba:f5:6f:88:50:f6:8e:84 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AO Kaspersky Lab

Organization: AO Kaspersky Lab
State / Province: Moscow
Locality: Moscow
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:64:63:49:ba:f5:6f:88:50:f6:8e:84
Serial Number (int): 32926772497389958169584111236
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 81:d7:1b:95:b4:dd:3c:29:2c:bd:98:08:5a:64:bf:c2:14:75:34:59
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 76:5b:67:45:bf:41:f8:25:2f:3d:e4:67:a8:de:64:28:f2:5d:f5:d9
Fingerprint (sha256): 17:9a:d7:eb:18:3b:23:4e:65:84:df:3b:f5:c5:a2:ee:cf:a9:87:0c:24:cb:48:11:fa:3e:76:2f:9b:15:8b:e9

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate kids.kaspersky.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kids.kaspersky.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kids.kaspersky.ru
www.kids.kaspersky.ru

Other certificates including the domain name kaspersky.ru

(limited to 100 certificates)
cert.kaspersky.ru
certifiedbuilds.kaspersky.ru
kaspersky.ru
migration.kaspersky.ru
advanced.kaspersky.ru
bestseller.kaspersky.ru
newvirus.kaspersky.com
kids.kaspersky.com
softkey.kaspersky.ru
b2b-compare.kaspersky.ru
support.kaspersky.com
softkey.kaspersky.ru
bestseller.kaspersky.ru
encyclopedia.kaspersky.com
academy.kaspersky.ru
photo.kaspersky.ru
www.kaspersky.ru
kaspersky.ru
store.kaspersky.ru
2020.kaspersky.ru
citilink.kaspersky.ru
kids.kaspersky.ru
small-business.kaspersky.ru
reestr.kaspersky.ru
academy.kaspersky.ru
noransom.kaspersky.ru
cert.kaspersky.ru
imf.kaspersky.ru
www.kaspersky.ru
kids.kaspersky.com
bestseller.kaspersky.ru
allsoft.kaspersky.ru
academy.kaspersky.ru
survival.kaspersky.ru
careersnew.catzwolf.ru
cloud.kaspersky.com
store.kaspersky.ru
whitelisting.kaspersky.com
support.kaspersky.com
careers.kaspersky.ru
softkey.kaspersky.ru
encyclopedia.kaspersky.ru
scan.kaspersky.ru
anti-ddos.kaspersky.ru
survival.kaspersky.ru
allsoft.kaspersky.ru
v-lozhkin.kaspersky.ru
NEWVIRUS.KASPERSKY.COM
business.kaspersky.ru
vpnhelp.kaspersky.ru
migration.kaspersky.ru
ksd.kaspersky.ru
kaspersky.ru
kids.kaspersky.ru
citilink.kaspersky.ru
keepcalm.kaspersky.ru
builds-by.kaspersky.ru
certifiedbuilds.kaspersky.ru
corployalty.kaspersky.ru
bestseller.kaspersky.ru
Spacelab.kaspersky.ru
imf.kaspersky.ru
my.kaspersky.ru
ics.kaspersky.ru
kosmos.kaspersky.ru
v-lozhkin.kaspersky.ru
support.imf.kaspersky.ru
citilink.kaspersky.ru
stop-agent.kaspersky.ru
eugene.kaspersky.ru
ksd.kaspersky.ru
imf.kaspersky.ru
allsoft.kaspersky.ru
care4money.kaspersky.ru
6.kaspersky.com
whitelisting.kaspersky.com
ksd.kaspersky.ru
acronis.kaspersky.ru
subscription.allsoft.kaspersky.ru
armor.kaspersky.ru
blog.kaspersky.ru
support.kaspersky.com
store.kaspersky.ru
advanced.kaspersky.ru
asaptest.kaspersky.ru
kids.kaspersky.ru
virusdesk.kaspersky.com
labshop.kaspersky.ru
best-admin-champ.kaspersky.ru
care4money.kaspersky.ru
support.kaspersky.com
support.kaspersky.com
os.kaspersky.ru
dream.kaspersky.ru
brainping.kaspersky.ru
sts.imf.kaspersky.ru
photo.kaspersky.ru
kids-conf.kaspersky.ru
os.kaspersky.ru
stop-agent.kaspersky.ru

Certificate

The complete raw certificate details for kids.kaspersky.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F51qf8ejC7YDjw9ReB7
a6WJfoMjwTH6r64D+k18rpunFIyWUL+d6I7SWhTgx4x8f7yZ2N2lDaQDpywO+K75
nZ9NxKHo9axTXjPD4s63/bYsH495DKeIavG6fG6tr7EBV+fGkdJTnzsdbtDbXS+w
PEu0OFTK08+qsZUwYWBi+Ow3wWee5glDkoF2JQHpSZAU2AIe25fI8TMntrR4koHf
Hx4OQ8MeqVJhn79Rn9TwHqXR29kYypWkmYCSRce9A0HVfn4jHVaYhBu3vhVexN1L
q10UH1HiNlJt+pCTZfa4PqIv39NXt3Y6OFiv8THImzHFMd4lPJHtoprSOH8IhwhQ
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32926772497389958169584111236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-06 12:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 12:16:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Moscow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Moscow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AO Kaspersky Lab'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kids.kaspersky.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28828913309495439719968654623368235733875536923153040198331009440484347624806582185669416226553818953005581765952745481763398285185961676690720787060786920141377859522947033099053896281393553934111036574562001834081519826143085233528234981463713961876848649897470803008891486218555334299585255456877483548559837794279232872870656655143890808332022608992234204502278541097332710199195510046628087723281454144080545853474240799067556063144006800126946382855226518091328547330882972986444932478801646147913453022112347736132478497469853294364266632308345033704507506730310846575133453767350105189833369046025309044363307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.kaspersky.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kids.kaspersky.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81d71b95b4dd3c292cbd98085a64bfc214753459
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044756412b4953947ccf0710fba312a7b6887fce1fcdd3908b251e7a71b9fd7beb67a30753754d62e65ad903aaaae88b64e42e05eb55ab37f634643499461f28cca553d4c739579f346fb1c979bab6898c1965b5f6ada9e941d5aea439769f76363090c335b6d58ee1e36d3ff5336382d67503376811ff87a02c846d12420a4401a106720b11e4c3dd38098575660576665d95dd498b9efeefce3f186a2f09027046402d01d2df21dcbd0ebddea4f7ee571674ea39030884c89bcef94e2b4bd279262d081d907facbcecc5d3b2196321a4841e26a540be4dd7dbf7195e9d5cf3715f1384cf1006f4ec3bd99a5622ce9630790f5cbcfeb2e136189aee67da690cd