www.rapfreestyle.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 5b:17:53:81:84:72:6d:df:30:9f:c6:55 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rapfreestyle.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:17:53:81:84:72:6d:df:30:9f:c6:55
Serial Number (int): 28191335533185412779770627669
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: fd:49:db:f5:11:1e:7c:4c:55:42:d7:32:cf:5d:18:b6:3e:75:bf:b1
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 4c:29:99:e3:9f:5f:e3:94:3a:de:d0:44:80:5c:16:6e:20:41:69:07
Fingerprint (sha256): 50:4a:f9:24:63:68:96:fa:f2:48:81:eb:ef:11:cc:2a:a6:0d:61:07:f3:b4:f5:c3:db:b0:a1:69:ca:f4:5b:9f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.rapfreestyle.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rapfreestyle.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rapfreestyle.ru
autodiscover.rapfreestyle.ru
mail.rapfreestyle.ru
owa.rapfreestyle.ru
rapfreestyle.ru

Other certificates including the domain name rapfreestyle.ru

(limited to 100 certificates)
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
www.rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru
rapfreestyle.ru

Certificate

The complete raw certificate details for www.rapfreestyle.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28191335533185412779770627669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 06:19:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 06:19:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rapfreestyle.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765233943514829417797657498354172658256073117519955023686421765197752500689378027920857409746784380449135034578830599170536232183365514036918316134674478486749042995373331667963102080002198313191074296863311358393444272959593786217685576884166566664987498710794686326642166076878480043776047399936709094594256451884537572134705664617245173238106343776516995667780127985213172789502100480914992519540834777963327693573018613719144742987031007331298537716115699391819877760437447995524395850878656061936591594230210335216968815148029470513092507692136503099443234615059736810068585542575951510471460945584966510241835009624879216712682283077136930902116011885240548182948331132732397727958606705456178182740901699966503965767010266628209831662932181172290450952808406846132447968557391567358136763337224751550566679742623418352792471947889947945261471776212475478000660484119296901172449423154054341735223933393556118743496650464137754524851080085071589727282883804598810513349720877478711804053216778610966091052411224235917709827472820216187490827821773136691725689180849824332057897012664036871417871516509219785037425993526450809339101613989371081380171435090596856824367731735000988224845938886914885090533828290691042064249996027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapfreestyle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rapfreestyle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rapfreestyle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.rapfreestyle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapfreestyle.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd49dbf5111e7c4c5542d732cf5d18b63e75bfb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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