*.delexpress.ru

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ec:36:3a:bb:af:53:e4:4a:63:01:e2:10:e4:d3:c5:3d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.delexpress.ru

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ec:36:3a:bb:af:53:e4:4a:63:01:e2:10:e4:d3:c5:3d
Serial Number (int): 313979382285285724295069620790103360829
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 83:da:3c:8a:b8:64:06:1e:dd:c1:19:a2:72:e7:09:66:f7:b2:22:30
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f3:cd:86:4c:cc:8c:99:4f:4a:56:77:fe:ab:0a:16:ff:36:07:77:f6
Fingerprint (sha256): 91:d8:8c:7b:97:39:94:57:20:17:9c:9b:b4:8b:86:f7:1c:62:22:55:f1:e2:87:5d:f2:4f:54:7f:e2:87:f6:33

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.delexpress.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.delexpress.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.delexpress.ru
delexpress.ru

Other certificates including the domain name delexpress.ru

(limited to 100 certificates)
*.delexpress.ru
*.delexpress.ru
*.delexpress.ru
*.delexpress.ru
delexpress.ru

Certificate

The complete raw certificate details for *.delexpress.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN8dLZhQ6LLRgTB3/8eA
PNGx1IKK1CLiQ+ZgxGI/7piUF0X3JP8ik5i4YTsmowV6CzTFQBbjOiGKfcKdI3yY
o5sQky8amRhct7fq0JG9qoyACaFgl55e+NokbqNJCvGPVy3n3hb8h9013ZHcOQX/
QQtnvYqz9K8JQkLPn8BbNTeQWngvSdltYxtL2zNgpj/IFuywKtwIhtzLhGzzyy8z
2XETXqELx5WTm01Q0m5TWiHnHmTjQ378db/u7PqwBYdlpApwVk0CtT6Vo8nbKm7F
23VuFRM1aZOVf64kYThCPEubm4IZOM1UP9qEGSVONUR6JDBPRuKnnOJ17fEQCl9j
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313979382285285724295069620790103360829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.delexpress.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20308150397176667819697866199727020709756252817881075657367721758751909902619416008064748543458367961880240033534654370665088769793009918551884996426665243645922452403769982049419012090316049824069881419625463485811806603592125905560246247012557441097644186346243083404119272745210511373812608689513757878795040870650492803270874396928280486845958108676383647767016587118665334316476775315044187315725890055412199822714623615009315219958256808885939442331351413917087545709465812069404228431576337023958540624309583214003906317677099810492959719862479937973571942692574127382461581092946940465751143804949093848933221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83da3c8ab864061eddc119a272e70966f7b22230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delexpress.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delexpress.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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