www.sonikteam.ru

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 63:d1:7b:cf:cd:ba:e5:85:23:af:d6:67 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sonikteam.ru

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 63:d1:7b:cf:cd:ba:e5:85:23:af:d6:67
Serial Number (int): 30892266152990449008940930663
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: dc:46:f4:8c:1c:55:2c:af:8e:d1:e5:8f:b8:50:1b:e7:76:3d:f4:6a
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): a4:53:67:84:3d:f9:56:b0:92:9b:3a:10:04:5b:26:89:27:ea:0b:75
Fingerprint (sha256): 58:68:5d:df:9d:a7:29:a0:1f:60:13:eb:ad:a3:d3:e0:99:24:6d:71:f0:d8:e0:8f:7a:95:9f:ee:dd:2e:bd:9b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.sonikteam.ru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sonikteam.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sonikteam.ru
autodiscover.sonikteam.ru
mail.sonikteam.ru
owa.sonikteam.ru
sonikteam.ru

Other certificates including the domain name sonikteam.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sonikteam.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgIMY9F7z8265YUjr9ZnMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMjEyMTMwOTU5MDNa
Fw0yNDAxMTQwOTU5MDJaMBsxGTAXBgNVBAMTEHd3dy5zb25pa3RlYW0ucnUwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC4EmZxFo0qXzqsIp+IXSL3UY5E
JQEEtrqgBBD5VezaaEXyx0z46PN5WIRUQmJgQ7Abj9fyTqcTaEls2e8MYUQUIMJi
DjTxXyU8TnUOgWgc51T89zrB/3EDF8myt4F4S1e6wGYtZhQE/j1v7+cH/9hZtI7K
V/8hDeiaq2U9NbVvMTcA9Iip33sEyLC+vtakRwRvMo8tEtTqkAiEa4t/3qiksCLd
F79cDP/BcNiosBOMTTZjlqaO8ljEpFhd/zmg1mescntEpZ42iVIpLrvM61qyTLYP
D5EbP3BnkfVIpPIuMuyboQPHPm8tcrPVOyaXhF9ye9wntBWw8YbSbpSVNXEnkd0X
dw3QDCrIYqEPBi1HlYW7KY8geQTKpbNZ2yX5Gt/tqX/EgUoU7i6FenC7fXV2x1Zd
8t+EOEdHvjg9SxRpijlHQ3hkpGzKL4jUk73TpGwF+1hgRC84r9UJtjUD/CDnb6mj
/T2MJdYRqzx5XSZGUONky0A4UwB1DFUD8nfNWc9M/7D6jRNtqfFqcxDd7auOZtar
2jROzV7Q10UFwDL6RhVgI17iK66BiUQSk6IWV21XIeEC5FB9GnuHS8vpC0Y+eVPO
+JegAZMgjIbxLyoRBMuPbISuiXXMgCKQMmPSlxmmbHY44d7wgwqv8ouNpjMZpQ7a
KevY7pUDkSAQHWlwewIDAQABo4ICLzCCAiswDgYDVR0PAQH/BAQDAgWgMIGTBggr
BgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5BggrBgEFBQcw
AYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2dGxzY2EyMDIw
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATAJBgNVHRME
AjAAMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20v
Z3NnY2NyM2R2dGxzY2EyMDIwLmNybDBpBgNVHREEYjBgghB3d3cuc29uaWt0ZWFt
LnJ1ghlhdXRvZGlzY292ZXIuc29uaWt0ZWFtLnJ1ghFtYWlsLnNvbmlrdGVhbS5y
dYIQb3dhLnNvbmlrdGVhbS5ydYIMc29uaWt0ZWFtLnJ1MB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNmMBzf6u9vdlHS0mtCkoMrD7H
fDAdBgNVHQ4EFgQU3Eb0jBxVLK+O0eWPuFAb53Y99GowEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADJII1aNWM++T2nD+1yLIWpAXx7bf3HR
WyvCsZNrs5+45hhRhWKFrPEnjlkg62rwGMK/KszHJt43iXNGzlaDEGZMXp+VKnC8
QgoC3X3PrbYqxcaNt1N5SrTZnZHfF7kDUVsSQNOV6sSs1J+SUH0dqDAvevfsC/jE
G8qrygzVh+BKs1Rc7op8fT+A8kl0oZOq3NDWn3kP85+ofJEDp0RG0v4lOuhcAvdd
+YqQLl/DlA69FwpaNyqU0WdOK33zFvsw5fd1DA3yxJI0ogEgtfWKHKF0uqNIUedF
AkM7sKhwwtoVx2iGnOcutCH6AhN4rUjiA2gO271DLSsSBwNcpRgjeuk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30892266152990449008940930663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 09:59:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 09:59:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sonikteam.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750947735532069944938039424824745681178251563660920202122814883562058036956533924195390433693164974233153123356347869670082760803548101929636147084374565021699187101099804420182392431812458174922712734739076919711871963196476870184206298890060638003111795557312198344533106791935608448179347169238996231914551042720799270689183693154459006088587047609317145495111133837489536455917900259448940111887275081664605261323364212741308659117977366945352390223951272395622127277802915304053444919207677500038694900182629655778289764954569066869720453049588306688024622948459635237813577489818538377814447687617071511446917437200600001824538864306876527153967770079165845482239335292419617699071364217124139252321631470265192147481355079955528514717020215632672085522164548315166635121063315398845481569086242441491511362684899197413225534231314045920861287024637212458482016787952638822230697181726018327550205793915152811903195992439128089033467868017493614745634342618792003881436500173718323610026252763713178423688743210475311914935495606594403668189483620782405427555673378763926006146233138366070179535802729524094713971269547525337116372172922248797741535785512399952813434054484464232536813242700934223887940865961291084943493525627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonikteam.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sonikteam.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sonikteam.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.sonikteam.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonikteam.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc46f48c1c552caf8ed1e58fb8501be7763df46a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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