vcsc.skoltech.ru

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:5d:d8:f9:1d:57:c3:35:f3:74:c5:6a:02:33:72:79 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vcsc.skoltech.ru

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:5d:d8:f9:1d:57:c3:35:f3:74:c5:6a:02:33:72:79
Serial Number (int): 7133424324136336834413943584990655097
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c8:96:04:c8:e5:77:cc:a4:5f:1a:be:f7:50:78:b9:df:23:b7:eb:96
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): eb:20:09:d1:f1:f0:52:cb:f7:6d:87:43:34:64:3e:d9:f1:d8:8c:76
Fingerprint (sha256): b9:5e:04:92:a4:06:bf:4b:b0:ce:28:0f:49:3e:7c:db:a5:8b:bf:b8:3f:ae:04:63:52:47:66:cf:c6:ee:2e:64

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate vcsc.skoltech.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcsc.skoltech.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcsc.skoltech.ru

Other certificates including the domain name skoltech.ru

(limited to 100 certificates)
vpn2.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
skt-ise-02.skoltech.ru
expwe.skoltech.ru
vpn1.skoltech.ru
cig.skoltech.ru
sber-hackathon.skoltech.ru
skt-guest-cwa-01.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
student.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
srv-vc-jabber-01.skoltech.ru
join.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
mlss2019.skoltech.ru
proxylib.skoltech.ru
pm.skoltech.ru
hse.skoltech.ru
vpn2.skoltech.ru
vpn2.skoltech.ru
srv-edu-01.skoltech.ru
box.skoltech.ru
*.skoltech.ru
mlss2019.skoltech.ru
mail.skoltech.ru
skt-ise-01.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
srv-edu-01.skoltech.ru
vpn.skoltech.ru
vpn1.skoltech.ru
vpn2.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
cb.skoltech.ru
sber-hackathon.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
pm.skoltech.ru
mail.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
smiles.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
vpn1.skoltech.ru
vpn1.skoltech.ru
cb.skoltech.ru
cig.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
contour.skoltech.ru
pm.skoltech.ru
global.skoltech.ru
*.skoltech.ru
esports.skoltech.ru
contour.skoltech.ru
truestory.skoltech.ru
pm.skoltech.ru
ise01.skoltech.ru
esports.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
cig.skoltech.ru
mlss2019.skoltech.ru
pm.skoltech.ru
*.skoltech.ru
01math.skoltech.ru
sber-hackathon.skoltech.ru
msc.skoltech.ru
pm.skoltech.ru
skoltech.ru
pm.skoltech.ru
pm.skoltech.ru
pm.skoltech.ru

Certificate

The complete raw certificate details for vcsc.skoltech.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Ku1rNcnwhMw9q0/mNq+
6Y5hg8T4UIaLDLExZtfb9P6Ab5QvJrunLV2opAm/n4rkV3a0sv2b5/TklOojhHLY
89HmQDiqp+jwKVg3ARHBtdFCT+GzklCUwTv7CDw7NykIQQ+5XmOKXffTXcV8FaLv
uz1iESIzTaWZ1QEYdv7Hbj6dbudM34xSFCNhRqIHFjh2qCVjC133bqUqzgJyyeo6
54rpLjIBhxGIBlIzVQwOF3t/6Dp6xJPksBXp77xAE+/uN0Pn2rEhk0NqoxUjI1J5
s6hfECdYTt9JIjSOxUsNysDtXa8KF1QhusyoFNK26PtIk7sODFUdR5ivurNavPbF
ySJ2zrtpGoK1l5fiXeX+llZwSlrfwASm0mdOVlCLhv3ZVFppL4Ukt6v/1In2JXYk
uPZh9K4sYz8vttw+LdsSBEIPDwcQ2aUscq7zkBSHm7B28XR2/Fjj8BpLZL1RDDta
1aKtkg04QNo4Xt+dzO7ras6kVKNLXOGmnkSOlQhjPSpU3vQ8KFK9PAsoiMpmAkCN
+7uQTA9cj5DaHZSE+1E23j+od9g6p/bX+/eYi2Qmv+ucNAd+Nxm9H+okpV2FDg7d
CofYqc5q2WQEB62LCFY9y5l94UhR4kpnxVpOuf5CYXu8WO7NQR2RMIh8Qv/RhBYo
6nBhWtpAH0AfN7YVUUN1g0MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7133424324136336834413943584990655097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcsc.skoltech.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851302350253141380141568608871765553714898824961610548813663490002207283771885888702743508240780786990185982608066639093251085866490997391656542071842494419030880806738265490897215052147219802622555575622734099294443835391685162630937188534233667324629543146624775901528695902229722389789391997420281051758681020402123213239588369410059401697755416330150438764416675710737832725042751995765892592415389809873471411561036691978817731165687493596320342757000970208621734458386069602067418842340049854807973118989187967413208606492014497210119863320178566096166243556716582874078949170921483460210076502521861404610103027625495949193084284023271978392284301242562241906085088662401012615899704560870036462095692634441937789960661284817872480331894658173203649986937279732051957020824775892986203129287064482396166696704621025275200130431888454502650158316700928948982904725463964403633046724163489836062957709606501160866645936318933172499258537071822071100898296322862618062145944791577297982811919996277948936158954896333063142188094960588874844473625095265565684695458142203974315379819738526662682101296188143526790085674314840914030321254946734430799296137069509133142232686874294255963653589784268675889678680444454958853914985283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c89604c8e577cca45f1abef75078b9df23b7eb96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsc.skoltech.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006291ea0f74121bea906cd2154f525e6b2e823e8d4d905c2b69c82af8d79f99edfd2d7950199f88931b925086d91cdfe111053290f9b65fcedf32c2c9e81f6791054db7df314400cdd17c764bc09d6fe6127252a6980c253ed1bbe2c8196e9d8d0cc791c9e592d955c360f5a0523ef0ea714883a5a4e329d782e64160b3e2ad3acb4a898b812a571c184d1143c4cac2e1f1ad5a0499baf00d12bb07d05637bf96cc05ab88741cd5e453378fc4f374fd9e4a77238c1248f9aec8bdeae5d39945cb7ebb6814e76d3e370528788e4c6b6211e3003e0fa880c6ad6380e36eb3be6a2440e4a3cea0c5b52709d278b96a6b5e180c5b8dc59d933ede10259072efce6f66