www.ticket.2aoao.ru

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 14:0e:7e:9f:8c:55:11:a3:e1:63:b7:c0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ticket.2aoao.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:0e:7e:9f:8c:55:11:a3:e1:63:b7:c0
Serial Number (int): 6207223119222663411946207168
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: df:a0:5c:55:0e:15:80:69:43:64:1b:ab:f5:4a:3f:49:51:45:3e:b1
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 27:62:76:74:1a:13:73:18:0a:c1:54:b5:c8:7c:37:ea:8f:75:8b:f5
Fingerprint (sha256): 47:06:8a:e9:1e:ae:ae:ab:1b:3f:10:18:0b:18:6e:d9:00:78:15:d2:b5:70:a8:c6:55:3c:c2:fd:f7:62:4c:d7

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate www.ticket.2aoao.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ticket.2aoao.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ticket.2aoao.ru
ticket.2aoao.ru

Other certificates including the domain name 2aoao.ru

(limited to 100 certificates)
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
*.2aoao.ru
2aoao.ru
www.ticket.2aoao.ru
*.2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
ticket.2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
2aoao.ru
ticket.2aoao.ru
2aoao.ru

Certificate

The complete raw certificate details for www.ticket.2aoao.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6207223119222663411946207168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-15 07:44:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 07:44:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ticket.2aoao.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914031438992726268291248910609648502785603469822056168570283563519910716368627694493365434664422311233969192101371857397744183797774622612857979909708812340894638186490201132696245140169462513494158131405273114458717323537158758547331498819976961115594465667684605460007989776518108086616110133986306566046785733939620784138233328781005726350745670067153916177246837921510562680210701714235049401817818794904496698775715579645100892534776438622815412320191358868485439730998842774015697598353718716725087492201764096846196314476791623039314350971033623667710497629132483315139678947920602489438427810005322089287459110506917737981388622978113088635487973566471520634863837369615696447419028845521742454551037543688724963606562651125404760148473037813418387624587506521867440074910320548070091919192787491736103542268443730618883238160843530831267163032395635383094785765113786080746120958202502089312556410522035516620694148781428575933190347805041281340656316389364060756906620791209087418847583011420055169826819891987743131934403155122597613684915727233019620874446124518279792317852898310625061079516898559260400717369713843310115249107284628509424241047617868649468328385307068925071393944287805128605593546588777158163636180463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticket.2aoao.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.2aoao.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfa05c550e15806943641babf54a3f4951453eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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