*.skoltech.ru

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0a:e2:b1:e3:65:66:d3:ac:b3:2d:bb:fc:bf:2c:57:95 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.skoltech.ru

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e2:b1:e3:65:66:d3:ac:b3:2d:bb:fc:bf:2c:57:95
Serial Number (int): 14469347050553062887391227862322010005
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:f6:6f:40:4c:c7:d6:0a:f4:59:2b:24:a3:93:4e:dc:1d:74:f5:59
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 66:24:81:15:d7:df:0d:09:8a:28:4c:29:88:5e:a5:85:3f:77:dc:de
Fingerprint (sha256): 82:cb:26:3b:c9:a6:a9:58:88:e9:b9:d2:45:eb:6a:25:1c:0a:84:db:08:7d:7c:7f:4d:be:34:ba:aa:77:f1:35

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.skoltech.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.skoltech.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.skoltech.ru
skoltech.ru

Other certificates including the domain name skoltech.ru

(limited to 100 certificates)
vpn2.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
skt-ise-02.skoltech.ru
expwe.skoltech.ru
vpn1.skoltech.ru
cig.skoltech.ru
sber-hackathon.skoltech.ru
skt-guest-cwa-01.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
student.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
srv-vc-jabber-01.skoltech.ru
join.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
mlss2019.skoltech.ru
proxylib.skoltech.ru
pm.skoltech.ru
hse.skoltech.ru
vpn2.skoltech.ru
vpn2.skoltech.ru
srv-edu-01.skoltech.ru
box.skoltech.ru
*.skoltech.ru
mlss2019.skoltech.ru
mail.skoltech.ru
skt-ise-01.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
srv-edu-01.skoltech.ru
vpn1.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
cb.skoltech.ru
sber-hackathon.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
smiles.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
vpn1.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
cig.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
contour.skoltech.ru
pm.skoltech.ru
global.skoltech.ru
*.skoltech.ru
esports.skoltech.ru
contour.skoltech.ru
truestory.skoltech.ru
pm.skoltech.ru
ise01.skoltech.ru
esports.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
mlss2019.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
01math.skoltech.ru
sber-hackathon.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru

Certificate

The complete raw certificate details for *.skoltech.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LJ6awODkgcF2ggPbU82
+q7+/iNanMXndOjThx9hclsglNJj3Hx/zdrAHaB0k71vnVMtZLh++BzWDxP6xolY
ZLgIfJm/+zOJjL4UmAM06iKw8YulIxehsZV9V6F+HedMrnUEdWaRr2ol7x36QVcm
mP8XPDKRRRyxpBWE8XC/XiObpr/IoRN+PLQUVBBJyKlxImbVXw21Sbkv1gXcUxmP
nXz5/V2jHfluYWgqmMPa0K2wWoXgjd4ntS/SulAOlgR6zt+X+KE4LugGCB64sjvm
vL0+qVF1hQ9yfWj5sRWpcRVGYphITR1qff9JLGV6UW+f1HMbENvoDZJI9L6Wh3hc
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14469347050553062887391227862322010005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.skoltech.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26850531531166465050056899814413301074369903543670773463061375228712820331845646700326841611181736854996717472690002031598140034492594528356756945793068014202471755777878390481494758805874901667153964883393269929954812935632260208390930012664453339363328074893416744052309907575677239425426651761554874675284404751662082269280223580288532853278297522228800209886892744996307648362638189487010707431915036346218653259264548794881701424090648550811097374554126238250493297399428318130316083107618623050166720222464451969296732979652865095970202473059751099341916810603016025040858947256947941037488190770451008076668011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdf66f404cc7d60af4592b24a3934edc1d74f559
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skoltech.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoltech.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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