ejudge.ru

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:1f:e2:5a:a2:ac:6f:43:7b:e1:00:ed:63:1d:66:b1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ejudge.ru

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1f:e2:5a:a2:ac:6f:43:7b:e1:00:ed:63:1d:66:b1
Serial Number (int): 1494780203849579350263933720850163377
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6e:ab:b2:c9:3b:b6:83:bc:2c:85:6a:22:61:1f:02:47:c3:3a:ea:2d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 82:a3:26:af:5a:94:62:4f:76:8d:93:d1:b7:51:b1:61:8b:24:77:b4
Fingerprint (sha256): ad:55:76:65:a6:fd:23:9c:bb:f7:da:eb:56:ac:1d:21:c8:f5:df:70:88:b7:1e:55:a2:10:20:c2:2d:2b:28:7f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ejudge.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ejudge.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ejudge.ru
www.ejudge.ru

Other certificates including the domain name ejudge.ru

(limited to 100 certificates)
unicorn.ejudge.ru
caos.ejudge.ru
ejudge.ru
caos.ejudge.ru
cmc.ejudge.ru
cmc.ejudge.ru
ejudge.ru
phdays.ejudge.ru
cmc.ejudge.ru
cmc.ejudge.ru
cmc.ejudge.ru
cmc.ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
caos.ejudge.ru
ejudge.ru
unicorn.ejudge.ru
cmc.ejudge.ru
ejudge.ru
ejudge.ru
caos.ejudge.ru
cmc.ejudge.ru
unicorn.ejudge.ru
cmc.ejudge.ru
ejudge.ru
caos.ejudge.ru
ejudge.ru
caos.ejudge.ru
ejudge.ru
ejudge.ru
ejudge.ru
caos.ejudge.ru
caos.ejudge.ru
caos.ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
cmc.ejudge.ru
ejudge.ru
ejudge.ru

Certificate

The complete raw certificate details for ejudge.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494780203849579350263933720850163377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ejudge.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800140853985076261706175483388979388120484645356629593635418166960888140728965107160628437574869676485766377981465723776809548350443265161246510880603171990895388087868956307786444433549685531684790846446067717618470022888594750198597776388401960130041245201940280184249992505467387102179043088100719625129830125034928618869311969227093987640074479735276336105464362895502949008310222338369314872838680430158408544089266301832567198197401008882764739862421400471159981764028471157351378406467087481509148968599118602474675364185722204487380509293121629730966625422607028686678736298522613353071028676273901936010684063697691361178965060088071002639692309824905090899839112893256007289224467805148446104248292585652086939314529625807394502912722807779410908967386043003752208288156725180223123239825511623091217358970806744667836176681160507643717727649942420989793726536104318933910150884362027228518677563765656539883513714625433134311779514343944255564546735084396557636905043772743007136758765000557600077144553958411380240198705482728502198731799563735268759443402081943147281982765936456488953875574519103276308554223003536670127284344625642362718818024441851402089728684683011170185291400656877619145094336948828081784165854239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eabb2c93bb683bc2c856a22611f0247c33aea2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejudge.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ejudge.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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