*.legalbis.ru

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 12:f1:ca:b7:73:ff:e3:79:13:fc:31:22 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.legalbis.ru,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:f1:ca:b7:73:ff:e3:79:13:fc:31:22
Serial Number (int): 5863038601453691567920132386
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 01:e3:c5:6b:dc:43:37:08:c9:12:e1:af:e6:1b:12:00:a3:a7:82:01
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 1d:8a:5a:53:95:cd:40:5c:b8:25:5d:6d:12:9b:a6:3d:69:5e:db:d8
Fingerprint (sha256): db:f8:7c:d7:d5:4c:d5:f1:6f:1b:5a:13:1a:44:ec:d5:31:f0:e7:c3:01:b2:1f:09:ab:c6:dc:96:90:eb:c8:13

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.legalbis.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.legalbis.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.legalbis.ru
legalbis.ru

Other certificates including the domain name legalbis.ru

(limited to 100 certificates)
*.legalbis.ru
feasibility.skywire.co.za
waze.si
*.legalbis.ru
uk.legalbis.ru
webinar.legalbis.ru
player.hgsummit.com
*.legalbis.ru
*.legalbis.ru
uk.legalbis.ru
*.legalbis.ru
playletterz.com
webinar.legalbis.ru
webinar.legalbis.ru
uk.legalbis.ru
msk.legalbis.ru
legalbis.ru
*.legalbis.ru
webinar.legalbis.ru
panel.legalbis.ru
legalbis.ru
www.classford.com
uk.legalbis.ru
msk.legalbis.ru
legalbis.ru
*.legalbis.ru
uk.legalbis.ru
panel.legalbis.ru
www.legalbis.ru
uk.legalbis.ru
*.legalbis.ru
webinar.legalbis.ru
ledsee.easysignage.app
player.hgsummit.com
legalbis.ru
album.la

Certificate

The complete raw certificate details for *.legalbis.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5863038601453691567920132386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 10:36:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 10:36:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.legalbis.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 959799139236003819432117455455464139322013599182494919350822806212474705502777099194317712789260997072875841395503720931055728366452922217042101314083872405346649889882710691823745143039046955355925877734493717608382217560449868470189096135830406189770688258971944650135693114382426963884423384294529128885452008849939883422824179489392151444275297699955577710028991169098417485622002888456395771993490312516680600638723607381272199399953492764430001191247439819258082647736515840036022132803476944037011467659817281221737531976587455987594634868003197946267728744620104349086886632338487916213402412918176660852977646793866924593595737139984439140012387811731257518365057141201268440857540805359379808408578557048849302219852111497629679481796289387302932598685821796787352990145469742553167444372866659872175480994270352320014878116969635868001164042324594918044800558943332133770265097827327130535162526656856174014636651210619992294430048968625748723910970776662013880206941125358287524608521613083812492878715028671304485100031265709932786260598963299224041604779657448704217004020172230558750551786542830505182822364206442639211162882802488954214132035142066318982440877727767700643874065254398570395570862888875284286958755801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalbis.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalbis.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01e3c56bdc433708c912e1afe61b1200a3a78201
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015fb4f41741000004030047304502200481631702006e076e395164c7827aa67fb4219a73f927c874b40673dd7f6e2e022100b8372e81dca52efd489ecf17fa173ad1c20c1a734bd93f3701d46a0e514781e50076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015fb4f4179d000004030047304502203c018c032c9b0385b6c9130e49dcd5c2cebeeecd9d644e8f97e1ffd83592352c022100896844a2dbad7687bf1306528c82a54f418ac4cb111c4d99e3d63cd5fdda3d5d007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015fb4f41ac900000403004830460221008b79712d578dd6e66a6278adb2fa940ca6a7d96d0fac8349e11102cc31604e6f022100d9264c7160f671d6879385f1e083bc3a03f313f8c4126aa0334e0733bca9faf2007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015fb4f41a08000004030047304502204a5627dc7f071c73557d994a9c91c85feb8416af935491f8930aaa735e517e340221009234402220438b083a6ad2f59ac5b4d24445e4a2db1165d65f455c1624565648
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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