srv-expe.bspb.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 08:2d:ba:52:e1:fd:71:95:91:0b:da:62 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=srv-expe.bspb.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 08:2d:ba:52:e1:fd:71:95:91:0b:da:62
Serial Number (int): 2531161629536543375692126818
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 03:fb:eb:28:dd:1a:35:28:ff:b7:72:95:12:cd:8c:3e:f1:fd:6c:2e
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 09:ab:6b:9a:21:7e:23:73:23:14:e2:c2:7f:76:f9:1f:52:e9:7d:56
Fingerprint (sha256): 2e:d9:b4:56:eb:26:3a:7a:d1:12:a8:fa:8f:ed:ec:36:d8:bd:91:b6:29:9e:e3:6a:f1:c5:3e:3e:80:0d:d9:c3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate srv-expe.bspb.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv-expe.bspb.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv-expe.bspb.ru
srv-expeb.bspb.ru
srv-expea.bspb.ru
join.bspb.ru
collab-edge.bspb.ru

Other certificates including the domain name bspb.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for srv-expe.bspb.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2531161629536543375692126818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 07:12:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-03 07:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv-expe.bspb.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737901344504282338241901388269603472837749253973271923236416557836992351257268921182803510158707761962405321692726560661555363385529939783646068951471964786339511523557342936969814126822130636476312316692037229602199528340880871210201520080153276248919266297895997222652509260470141952830967949600411500323232146619493259257860718712361483449136917456968297537350899241305886400149038012418319909736824004209454731495836491038194354441888032601894797336686034883311468494528211262502382902886842962029344602146126559470243735548516047478350014029391881323404023279624141060797005815900906979288986938698193967188553369897863708771471724357859593874552594927740657243244565659701677648508193094669732350155755593323962571910977589679749967381219752246319176113705050731096336948499799376516475034644687046204974633545067076930424476405779314120240249412762834156862937154381483925905998991622861019749292283124792324432840793379378715248725972853628661808106828073550595826200875269929981289052549606003217349207649365856833683080330614200398197258152713217210836908071352675187560659868634781228555024778984476839039695068009796769555104225922349574308082152320923060911146636090306137725264132713544132020405350046826596599858979659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-expe.bspb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-expeb.bspb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv-expea.bspb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.bspb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.bspb.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03fbeb28dd1a3528ffb7729512cd8c3ef1fd6c2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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