*.legalbis.ru

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 46:76:19:0c:44:f8:9a:a7:db:77:7a:e7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.legalbis.ru,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 46:76:19:0c:44:f8:9a:a7:db:77:7a:e7
Serial Number (int): 21806722219701573913530563303
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bd:00:06:09:01:12:a8:6a:b6:86:aa:10:6e:d5:c3:31:20:e4:e6:0c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 9b:4e:ca:6c:b2:a6:2d:e6:be:ad:36:04:84:2f:63:c9:1d:fc:c5:95
Fingerprint (sha256): 2d:1f:a9:84:32:27:15:a7:54:7b:25:96:37:3d:42:6c:4f:e1:71:74:81:ab:39:a5:9e:bb:51:4e:fa:42:e2:2c

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.legalbis.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.legalbis.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.legalbis.ru
legalbis.ru

Other certificates including the domain name legalbis.ru

(limited to 100 certificates)
*.legalbis.ru
feasibility.skywire.co.za
waze.si
*.legalbis.ru
uk.legalbis.ru
webinar.legalbis.ru
player.hgsummit.com
*.legalbis.ru
*.legalbis.ru
uk.legalbis.ru
*.legalbis.ru
playletterz.com
webinar.legalbis.ru
webinar.legalbis.ru
uk.legalbis.ru
msk.legalbis.ru
legalbis.ru
*.legalbis.ru
webinar.legalbis.ru
panel.legalbis.ru
legalbis.ru
www.classford.com
uk.legalbis.ru
msk.legalbis.ru
legalbis.ru
*.legalbis.ru
uk.legalbis.ru
panel.legalbis.ru
www.legalbis.ru
uk.legalbis.ru
*.legalbis.ru
webinar.legalbis.ru
ledsee.easysignage.app
player.hgsummit.com
legalbis.ru
album.la

Certificate

The complete raw certificate details for *.legalbis.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21806722219701573913530563303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 14:45:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 14:45:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.legalbis.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746075290025585425985377199371801813267707499951865680954432386678932306574108359111689996137333382182655825884398977559829962674031731193140392850455217629754348465162098923625200383547910140515593620962985760868549618553369427270837696802474896869071574785250646480495814151900833520827529713996730025771287289560204843350707539594811364177208782311810723772332668352779015404031231383675517215125196137586189270806277098221897030524725599681096578281413855178163654671757236758560029983142575271685072113259244998569749767207018007638654078601331460913433665110060344755326887105508704142693325122663777296539512149873088642166930208493542344948946209639249223913619370286721260755121716514256085548547833725518432191822157944647138930302930241173263617204569236879852391315811102602608571734634169127782476633646361510342488803881818009649347614877766851716380665255958088326341370295449064803671406850872490604982884300223860226471437200648015088345876906964041339059029951062077530381493266018563721404672963771421134859226342965889455164384739250042398521868334866962535063015821407749610551234052930170058652807177676678545974545270300501473366035035649421087921494886562446398379665233601825265474622094622355515515022286641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalbis.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalbis.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd0006090112a86ab686aa106ed5c33120e4e60c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016deec7d48d0000040300483046022100bb89f22283839ae213d7e1885d0a536b874f8ba63be1978914bc49543602c795022100c3606da074a609edc77002fbc56cb7e49a1a1849369393007b0bbb4fc732c86f007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016deec7d4850000040300483046022100a0b289eb86feefbca4be7eccf93a50d6f0e029b796e5f1d2a3015feb1fa701320221009e2d0ae6c9a55edd989654f1acb61a39d6c8773f3848849656ebb51c3dd79c01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b5859d2afd7f94b4f6f55b81115bdf310b6c83ee5845939d806bb36bd012b2bc1146fc86d5f2e6d03e0c08230e74431bc576ddd368546fce2df25d869cd12a08038e3adf385bdf6a528d6dd1602fd297c191111e917a6ae8b7d08c23b6d26c4482e8803cd7d5bb68071a2a72e3bc066233731ec6e860d92a8776be09e791f7f69291a7d5dc5447dfbd3b6a15fb841f653213fd19b7169b1d53d32105e3feed24b7eb9fbc2eed49b1e9c046d011d9f9c7c25fd83e0ebc73835fa70ff0b5c7d72005f1a259b6d17a79175ac1146802a0da8352fafa00b8330039f8addb88743ad0af057e7d7ca0b720dfaf5d43e579378a684f4729a0ba20e628e45072b0e8e350