*.uralairlines.ru

- JOINT STOCK COMPANY URAL AIRLINES -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3f:69:5d:f1:bc:05:6a:2b:27:4f:dd:a7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JOINT STOCK COMPANY URAL AIRLINES

Organization: JOINT STOCK COMPANY URAL AIRLINES
State / Province: Sverdlovskaya oblast
Locality: Ekaterinburg
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:69:5d:f1:bc:05:6a:2b:27:4f:dd:a7
Serial Number (int): 19624936469100855821601856935
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5b:87:79:c9:c3:95:b4:8d:4f:cf:11:d2:c4:d1:bb:46:39:11:03:d4
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): b1:37:25:d1:c4:03:f7:95:31:87:f7:03:78:02:57:62:25:1c:9d:cc
Fingerprint (sha256): 6f:30:4b:59:7a:ae:ac:51:4b:99:e1:c6:27:9b:ae:b0:69:43:ca:17:5f:7a:04:3e:9f:f0:0b:bb:a1:47:ab:82

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.uralairlines.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uralairlines.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uralairlines.ru
uralairlines.ru

Other certificates including the domain name uralairlines.ru

(limited to 100 certificates)
booking.uralairlines.ru
*.uralairlines.ru
info.uralairlines.ru
*.uralairlines.ru
u6ibe.book.uralairlines.ru
mail.uralairlines.ru
*.uralairlines.ru
*.card.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.uralairlines.ru
payment.uralairlines.ru
book.uralairlines.ru
service.uralairlines.ru
snica20gl.wpc.edgecastcdn.net
*.uralairlines.ru
info.uralairlines.ru
apps-tst.uralairlines.ru
*.uralairlines.ru
snib12fgl.wpc.edgecastcdn.net
booking.uralairlines.ru
*.card.uralairlines.ru
apps.uralairlines.ru
*.uralairlines.ru
etm.uralairlines.ru
book.uralairlines.ru
apps-tst.uralairlines.ru
onlinebooking.uralairlines.ru
book.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
pgquni.uralairlines.ru
etm.uralairlines.ru
info.uralairlines.ru
service.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
snic7f7gl.wpc.edgecastcdn.net
*.uralairlines.ru
etm.uralairlines.ru
service.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
*.uralairlines.ru
etm.uralairlines.ru
snib12fgl.wpc.edgecastcdn.net
booking.uralairlines.ru
*.uralairlines.ru
*.uralairlines.ru
payment.uralairlines.ru
etm.uralairlines.ru
booking.uralairlines.ru
book.uralairlines.ru
booking.uralairlines.ru
etm.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
payment.uralairlines.ru
etm.uralairlines.ru
flysmart.uralairlines.ru
payment.uralairlines.ru
book.uralairlines.ru
payment.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
service.uralairlines.ru
info.uralairlines.ru
app-sec.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
service.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
etm.uralairlines.ru
flysmart.uralairlines.ru
book.uralairlines.ru
etm.uralairlines.ru
service.uralairlines.ru
apps.uralairlines.ru
book.uralairlines.ru
payment.uralairlines.ru
etm.uralairlines.ru
etm.uralairlines.ru
*.uralairlines.ru
mail.uralairlines.ru
mail.uralairlines.ru
etm.uralairlines.ru
etm.uralairlines.ru
*.uralairlines.ru
etm.uralairlines.ru
mail.uralairlines.ru
etm.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.book.uralairlines.ru
booking1.uralairlines.ru
sa492gl.wpc.edgecastcdn.net
u6ibe.uralairlines.ru
etm.uralairlines.ru
pgquni.uralairlines.ru
u6ibe.book.uralairlines.ru
booking.uralairlines.ru
flysmart.uralairlines.ru
booking.uralairlines.ru
u6ibe.book.uralairlines.ru
info.uralairlines.ru

Certificate

The complete raw certificate details for *.uralairlines.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZPe888iM+yRvJaHOooh
tBtQL71bAY+/EdPIoscdhDEDkVNx4y+sLU+aUyfwVGdnMjeifcw9qaAhEBhWK9Bq
1M8XtDHrbj3BCCZWODpi6oRHZQElICZONHci+IpO5LiYuXOrNzMzcTpQzPbs9DxY
L2L7ee2xje7KOWytCjbKGNm55CG0LzhpI6rxAnDj7eDr4TRRlQc7NpnQ4uaJNlwG
QrJ2cfhtyD71bMNjyQjLZiGKt5JuPitsbrGl502PrZlXHIq1S7gnTFMqNaY5ebcf
WCSDJ+uWmOyelpCl+fvRO4aBjoUQOXgLoNFw7iR4LO4RNJNkYb695Dthcpj6glKn
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19624936469100855821601856935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-01 07:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 07:21:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sverdlovskaya oblast'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ekaterinburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JOINT STOCK COMPANY URAL AIRLINES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uralairlines.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24941863940602077327914347072449051731131892313538493814119635686228022288203001728509095997213935499840195695143510969410534600409441497326259115087795164468758327607890900510366412966157207911333528396997742079442000157022630821179961442649801921073053499696286593597496509476753070953287355233812991908963246197957342772807827161730072916682491686299270370268875265383370293708924433959363605121969198109975844422293049794929133262387607014317953626025137675483332127270941001940781954405406532159454252382807885193284085714151470645265393804432163888717328475522881153377903567165359334549523144280042020267009993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uralairlines.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uralairlines.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b8779c9c395b48d4fcf11d2c4d1bb46391103d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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