www.gadaniye-da-net.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 17:1e:dd:38:5a:5c:9e:21:a4:ae:ca:5f was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=www.gadaniye-da-net.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:1e:dd:38:5a:5c:9e:21:a4:ae:ca:5f
Serial Number (int): 7155467683001010803843189343
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 08:16:1e:99:3a:a8:a2:0b:71:d8:8b:08:08:73:e4:fe:d6:ca:8e:cd
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 09:43:08:48:7b:5d:95:59:be:6d:6a:f7:23:e5:2c:78:f4:8b:75:6b
Fingerprint (sha256): 4c:65:33:86:3f:a3:cc:65:a6:48:ec:fe:c8:5a:e4:0c:58:f9:8e:2c:46:26:a0:35:eb:34:56:c5:c8:17:6a:3f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.gadaniye-da-net.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gadaniye-da-net.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gadaniye-da-net.ru
autodiscover.gadaniye-da-net.ru
mail.gadaniye-da-net.ru
owa.gadaniye-da-net.ru
gadaniye-da-net.ru

Other certificates including the domain name gadaniye-da-net.ru

(limited to 100 certificates)
www.gadaniye-da-net.ru

Certificate

The complete raw certificate details for www.gadaniye-da-net.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIMFx7dOFpcniGkrspfMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMTEyMDUxNjIyMDha
Fw0yMzAxMDYxNjIyMDhaMCExHzAdBgNVBAMTFnd3dy5nYWRhbml5ZS1kYS1uZXQu
cnUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDJqBBYW+ON+SQopwNW
nyg7lxqwON0j/jdnUCj4KP0GFnRq/E6p4EztqZMha5aTw8YsqJ6CBxZHderEAThh
a0cQxqIGAp0SdrBhAQy+9/PRT3g9DMLHkh0OM3wwF2FIR/rSDUIjUbdZaGR8raHf
uljCXIJj4GpvPhc8s+fjFIRqwgLSEN0h2NExU/l7Mih8fWYjuLXf0mErHipgda88
UspKC8EzHtHbjVs8VnvckuAtAR4Lm/O2oDd1hSBdX5kDHfEW5Y1GIZy3eZydCk2L
FE0LskACK6cjWoxGz7djozeHT3vhJbE0iIzM1ciPF/2UWB2xxsA3V1q4jfER38H3
Hb4Y3dAqaeAKM2kOVSImiPoFR2kb297csSmFZR6NpZ+za27FWP5kLWZluGQBq4GN
LNDN/6imim+zMEyOzRogLyqRUeMLi/3J+pu+i7FZBAXlYBpx0mwA7DZ8bZo+jpi+
UyiKgDXJ0fiKpRfsGrzBQaoZiwecNFOrWp8+9H/FnpSIf61eu+T/nBdZFwSd1rdx
S7ZretJwJqFzZ86L3lSmwrD0vTsEHCOcFYKBm+ieHsT3uJkTzKql0qjLJponrwp3
YTkeFmyUHZEIZEz6iFk1iMGffKL6poQAw7UZfB05gcbHdd1cuTlZoDzfJjr4c25j
GE3OslGE007g2smBZb3yhXKhswIDAQABo4ICTzCCAkswDgYDVR0PAQH/BAQDAgWg
MIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5n
bG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5Bggr
BgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2dGxz
Y2EyMDIwMFYGA1UdIARPME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0
dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATAJ
BgNVHRMEAjAAMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2ln
bi5jb20vZ3NnY2NyM2R2dGxzY2EyMDIwLmNybDCBiAYDVR0RBIGAMH6CFnd3dy5n
YWRhbml5ZS1kYS1uZXQucnWCH2F1dG9kaXNjb3Zlci5nYWRhbml5ZS1kYS1uZXQu
cnWCF21haWwuZ2FkYW5peWUtZGEtbmV0LnJ1ghZvd2EuZ2FkYW5peWUtZGEtbmV0
LnJ1ghJnYWRhbml5ZS1kYS1uZXQucnUwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB8GA1UdIwQYMBaAFA2YwHN/q7292UdLSa0KSgysPsd8MB0GA1UdDgQW
BBQIFh6ZOqiiC3HYiwgIc+T+1sqOzTATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAJydPHLBZ+L+LeA2Q8EN7ffCQw+QTSSM2SdeJcx+bQuQF
/2oFN7V+6Dv+Mg6nyggwSJkhfASd9ibFpETSMCxQfpMers6liSbGtlVMWz5tz0ua
KsPW+rW9OGBP5Q64FbxtSanV9AQu+VGfnxPQ9M0du7QAi6u7ErWkw/qs6Cpr07Di
DdfrJz1vp2GZI0bqi3U7cNALSzYUQKGYuhWPvsdbBeJZ0VXTbdd6RflWpa5WcPUi
T9GcLC46Gun8HM05ICxLP7UNydCX51SvGAQClIoBMh3iQjIaiXlf4ofmvX0GvrbI
b9PE3unISbPwBm5H7o+f8msE3ddOAgos04p1aJNIvA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7155467683001010803843189343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 16:22:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 16:22:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gadaniye-da-net.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822686741584403139659870206848832564239123353501280226700184170996468763485561821479799865526726062922795285149328397726892654631711968368005818638940199855970345766733706464546699774469541465183708186175512937358106049356448041849717339220922145985686847981786678693162113119612184986490078857479358124632529353462792764851520778827756996129219652047031850034930034307159011178529851398811421352888277189170766851254904023968683718091984362968594491485441408760968640560293968535865208865367108103463450772616202657274142970662379300117736244459120309313348582744419131743206121874150985817165356043544183884153553182738796942040205414665752213429200934602064403985802132027504628146465751921602646677041167562966682716170733791147565047915870863453295499650040342359252051577590403924760909257076293985330842718987803896767078920878172366945061162339782467771328413745455467689475626144745472824152685913803811964801395648057114567155470375142717525261524158852949454555194995813066572005677838809784533617559544037705038483021680137769816910037400039917478526321224554082362683279199493573199763940741428224206031889837590933203655719347169398031743865432602268949425243608867089977087023829438995361332252660499049853676877423027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadaniye-da-net.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gadaniye-da-net.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gadaniye-da-net.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.gadaniye-da-net.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadaniye-da-net.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08161e993aa8a20b71d88b080873e4fed6ca8ecd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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