www.big-stirka.ru

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0e:95:47:1b:ee:f1:a6:79:0a:bc:30:fd was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.big-stirka.ru,OU=Domain Control Validated,C=RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:95:47:1b:ee:f1:a6:79:0a:bc:30:fd
Serial Number (int): 4513255887921510333361697021
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 1b:45:be:1f:d0:3c:7d:d3:4d:c0:c5:fa:50:ce:88:e6:e4:44:c1:6b
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): c8:dc:41:12:60:61:a3:4b:a3:db:57:b3:74:66:ed:c5:db:d5:c2:77
Fingerprint (sha256): bb:3e:be:3a:3a:00:dc:a6:ed:90:a7:51:57:5c:23:f1:f8:ce:07:c2:79:19:24:4e:4a:bc:8c:58:36:b7:1c:51

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.big-stirka.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.big-stirka.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.big-stirka.ru
big-stirka.ru

Other certificates including the domain name big-stirka.ru

(limited to 100 certificates)
big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
www.big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
www.big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru
big-stirka.ru

Certificate

The complete raw certificate details for www.big-stirka.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApqYeySCHbrwAr+Gnqaxs
Rz7Z4IGyEsMgxSdQ3Mx3Pijo5jk4b8v6bDzWD59Ae3ujFI79qwN4x/1kKObQN/6k
IzbbMPj3a26VLC4SED8wmd/4Bp3qwnG24AH8xb5ak+3jIzOkvggPmJD1Ciwh6MVO
ZLlXOZEtPEU4kNFSnuAyLEh9+VtuStn134Oa+I7cYkaLfn9yma1FsRdWn7Kwvg3I
lIS16OgNgIEKUJZFCjvaWINrJAOhRnIUIENmfwIOjGRhxayQV/dFaUbBdcEjTF4K
EU0juabkf7gkMv52stbYrQZHk5OhKyL7FTvFSs3tUaiKDexF0Lo8XJJR8UPfK2j5
Ka7Rr6UjddSwetpny4Xhq+RUo6vurQMTC0TbwqHLK9ByEYDp2HNfMDFskfesW35W
KXvToIGF4ecltM6kukTo96Oru0ffQMzB5iDwCx0jc0Muc8QXbJ54MEG3y1hYCxw2
MgYQgC1YqrAViBM3s+Bb15ItM3XThHL92DqIt9fEWxildz+kMQq/ip3NAArQoiv6
FOJ9Rp6EYDYHf4Ras4VrhfOxdiO7aytrUmWJwY89FQiaOS+cA5oWoo1vSTx3qUjt
mXjLqz4Pp+hKzX9f/xHpaBHVo14yePMjmNMfXPDYtIs4zXb57xeh96qfMRatmZcj
VpR6OuFSgzLBZl4patU/fckCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4513255887921510333361697021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 10:13:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 10:13:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.big-stirka.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679868225911757459838012372693133929580039537917671843335531035822915568182806176374405938264286787069860245250162116703743055157926455679294102088666732970435751109960843647296377150484670988878820574117963377568117637958564347001156876948748622003821999059688899526158384609951030300167895532646132238985566161288170137783578806304188508070486804741395758099716256551506322736190324775665904149113776100050598703545299504709072366052720519154745013721731646437879738413810320443775492618362197604497093980050811820074137290877735056785843457474962984410526367201359428074914059835354298828082596924834869408574460559174106404408381948209423168159061443602709528075614460245063965225842901865228444123241518748494000960784913236307564055033026916790291316594414487041338362204026711836923751224401771507446779840740107531138634298060038298764367173695021681807860683213169555220039810533001085752180318018996429007446184259007971325480142032987487452193888310939378987579629256404444855173821803857362661305080742626093223311939207331976442834699069399374436741359990327368283131089847900367556772471798254538283201193007418184846542395939483707834886688111002355541788346960880917397586042134200491954382322437768587969651630112201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.big-stirka.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-stirka.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b45be1fd03c7dd34dc0c5fa50ce88e6e444c16b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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