DV SSL/TLS Certificate for www.quartzsand.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.quartzsand.ru DV SSL/TLS Certificate

This certificate with serial number 0f:3a:4d:7c:f9:91:94:28:c7:b9:44:dc for www.quartzsand.ru was issued on by GlobalSign nv-sa.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.quartzsand.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0f:3a:4d:7c:f9:91:94:28:c7:b9:44:dc
Serial Number (int): 4712758772456588315608040668
Serial Number Length: 92 bits, 12 octets

Subject Key Identifier: ee:c9:f7:a5:39:1a:41:1d:3e:10:2a:39:86:9f:89:df:dd:f6:d4:83
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): 94:0a:35:af:75:a2:00:93:f5:58:ec:9a:8b:27:36:d3:47:71:86:bd
Fingerprint (SHA-256): db:5a:39:ac:42:14:bc:db:34:b2:a6:83:ae:88:d5:a4:39:af:21:10:b9:64:79:ff:3d:b2:a2:51:35:56:40:b2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.quartzsand.ru
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.quartzsand.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.quartzsand.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4712758772456588315608040668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 11:34:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-18 11:34:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.quartzsand.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874158478931033434826330392440082997988206253949844003549879395159083617421769157254821768881295964685184501243296651591007805350976931600926832786959890591503151138064643872137522632172510711989051817340600285629830784699054096262808665481703192706205822681229858046342760369238927462031756872765228374690427358468492944373439269315667276671467908409719269189747761216101284884036192048658486147178176671268484034935728470821772467092731378680945276095798568759744285224519557461336790505965178357282509344055720266308727421888995836727856566845200193540827129494442558430068717882058014740454323421917035703424936417867049841587459546358409198388807106194959292223369722042181698461968809662144298857205645745631461924432679433995180115423348995475173120470652998246105710306327452196779471164438175269338797268951975527681746758041043393421334767746730669040052914459495655524926274686464151132132679412897945922384258875978268952350937630231553444675917168989184242424318465014877594920725832254590110289039033618863822651036649916346792700690208533429233600670340466205294908243909756460396309738053480743679596355742470479279302486340261406575867920698734262957713380641314649119240354106704015676100484607560781223234261886181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quartzsand.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.quartzsand.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.quartzsand.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.quartzsand.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quartzsand.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eec9f7a5391a411d3e102a39869f89dfddf6d483
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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