www.workid.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 1f:a8:68:d9:27:3b:f6:f3:7d:70:99:8a was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=www.workid.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:a8:68:d9:27:3b:f6:f3:7d:70:99:8a
Serial Number (int): 9797629974041761986640910730
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 33:f9:7d:a9:ac:16:6a:27:18:49:95:b1:58:b9:91:f7:85:74:22:fa
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 8a:a5:52:14:9b:86:4a:11:96:8f:89:00:d2:7f:0f:49:32:e4:c4:8f
Fingerprint (sha256): 2b:22:5d:60:04:56:8f:0f:aa:dd:d3:02:0c:3f:5a:f0:14:1e:fc:31:22:3a:a9:f4:c5:d0:fc:f5:1f:73:8f:2b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.workid.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.workid.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.workid.ru
autodiscover.workid.ru
mail.workid.ru
owa.workid.ru
workid.ru

Other certificates including the domain name workid.ru

(limited to 100 certificates)
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru
www.workid.ru

Certificate

The complete raw certificate details for www.workid.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmySmoaazuuQn1bYNWXxz
zV7ZzpyxIu3RIc6OHBSfEg8pjgnN7oOaogrQ5wPsrYf4EhyHHHn5AWTsC4bpmLYu
DcM/2JEAc5VVAhqidfbs7VPG2EnuJFAMTgy2ZOh5V2oDPpHA0w7hbKeBTRtRs8os
m2j+gZJ3M3upEdlUlRnjrTcmcATUR0bTnOz44oV4D8F2+rn6/HDcD8lKvBqoj2Gy
RFD3rxp+9JAxJ34mhqTqMzCksBGnOqKxwAIJQnKQzrAvX+7G0cuqZJreKa2pwGfB
F6aVEgO79+KnLnSXtUnbllSGFI8nC/695r6vnDGzHp+Qsb9xzyX/2QEM+uOwU0Rz
S5pFyEoKzqr1Ur/Ro0mzlEj06AXzev8NEZW1k4AlEDEH1WAccg5J3cY6icDVpRHG
H9iYZoOkOG6IE/caI1Nz9IJa9I+US7Qor3dAnzjKo5c4p9lGdLo5Y2NrdYTJSDcb
PyzmBDIIp6MjMuFbG/3ip3Q8HyFvMvhZPnM5U6esR5pzxRj7cjyEX3yxOMZ+ePL4
9mGXblcReTPuTgq1X+jo1xLnGFeGLGELJgDqezjaj+rz4b7y0DDh/zzksLpBPr6+
/926aejVmlsiZfXlJ/eRAeoGucw3dDp0DIdJMkOVIbuY/o5IK4P6DAPiaoHXqo6g
/oEBl0jb9LXrGWM0uXV3ztsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9797629974041761986640910730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 09:18:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 09:18:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.workid.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 632928903369308223473865318465864294762659002896542951536878184924598243979236096373581724696902066140557618696775306190058965500265345759978192267409173275745741441480602863979602557791042698038836146052770240306531059048466424812191434884443048779274634612246347185873547501109433896364125893342235213500770754110352896618817518090580988574031903443436381767590081963329699743805683991584441780606732694013971685919166253186123692390767308820048800699870395108837520376181029226349414961518392246719307291519807372240266400720812586587752026555016908880833029047238707601199016354539471474212734923849212641873442913601260645782327439969025078600796644697851685539586944158354044772681135528025794595820995850618930710229230450079949490330340870150935449636015384086426035461118710093289300943688697261651492944387684911972705216311610744539278831790066971780936199425403168150725775560410757423500790206115513307370501698772716409886877749383639178202554800170917682599014128130026062487807650677556016276420036860002401929242013336174064450562659891789979262647692726940304960128542913092095057237329472720201638706417974618664038285471701319696688771738403408205174090619504687804451820784308733016668013278186404682734423756507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workid.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.workid.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.workid.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.workid.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workid.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33f97da9ac166a27184995b158b991f7857422fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fdb47e6243f6ef6de8a9d1980573beabf36ec078e8ba653d1232c5e15ccb96adf2c46982ee0b63f6e5291c11be27bc5ea4a18e9ff59c4da1f28f73e1810913b03adddf834ebdb1a53ff0261177b49361d2dfcda726ae054469276960f11f8857c9251969ea2f7ca106f029b6fbcfea6bd96d70e224f39faa67d27e857c53e3a4d12df627ca75117ce7ab924107ef19f1052a1287d64c4aa21bd0f19fb7fea48d4fbb88ed0b7c14c228c769aca6168af8edbca046f8d5446084d84cf5ad94399d264c6ed5be782abcaf4cfacecea2a60a0525a9ee4b9ad90cd0cfc11d10ef92b9bc6a52948204700685c98d65367948193f66cc1c391b318cf181191a8b557c4