www.lilballerine-krasnodar.ru

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 41:94:e5:05:14:66:c4:5a:ac:15:ba:6a was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lilballerine-krasnodar.ru,OU=Domain Control Validated,C=RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 41:94:e5:05:14:66:c4:5a:ac:15:ba:6a
Serial Number (int): 20296528175318770324365228650
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bd:aa:b9:ac:6f:92:dc:93:64:8d:93:87:e0:48:62:11:b8:ec:63:17
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): c6:d7:f3:64:6c:f7:a1:44:cb:f6:5f:bf:b7:1c:b6:01:14:6f:6a:e5
Fingerprint (sha256): e1:ae:89:ad:43:a6:73:12:32:2f:34:01:d3:34:bd:d7:5a:4b:ed:75:d6:dc:83:03:6d:a6:81:17:cf:78:c4:f2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate www.lilballerine-krasnodar.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lilballerine-krasnodar.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lilballerine-krasnodar.ru
lilballerine-krasnodar.ru

Other certificates including the domain name lilballerine-krasnodar.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lilballerine-krasnodar.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20296528175318770324365228650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 07:22:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 07:22:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lilballerine-krasnodar.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720888115348889381800766492481232055892766932752043495251586299109858361437974669653510358642491329039544441516302705820861431056182101743903707787744523612124151167033731971668301422010604281011757660729997586000591229356062452952844059799032086020672740948354071439940872946140991920183364319340323031424928326382582314090182035821026252382551854276271897131979495068984711563394692513690663650948471906621399026322900393560507303163702610893865265223016926157118580813290945137448842824500756261255581736066666978951784196298618580363677452650387868929251757025461440417625034721932244667710940811528268179200390631057929798725093219209883602540647698858766979805629739655104358925097026135205833467834130886794446026776418211357385539852254343844565246196201544064501746072765185924562296565783537185885919249107858522103756212641425931974163765173521571423665019611181786203308721983110932736117466688346985409802902335904165935219838830401294230911465147202981576803040058762866597369245297514589922458456564365860703026256101252102962592946755021612069796222981382195711350560372680624359412543641113823928745299929142007066701539177034788850320160066276065443866662770021745198639612291704938738413255120740416868913104815177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lilballerine-krasnodar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilballerine-krasnodar.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdaab9ac6f92dc93648d9387e0486211b8ec6317
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003931865141c5c1f3c53febb6c35fc9d3234bfc037714e9f9b4b6b6c1cb37d12afbc6d490e3812b9753d1fcb2fc9e54a529b6a3ab535ec4d5abca5acccfc2459d0e8d7d666aeac4f266cd9180a8935e7ebe1a21da40ca891649c15b64cfdbeef232bb9aaa5ec5ab8d643e53f570292ef1e7f2cf1060be97d78f1364bdb0c7fc6240beb686f56ba476738fc9f5e304cceb96d91b4865ba7690105be05f3809b2dfc0cbe92889d0bf007898edb19828154ecec79b41f669c4db3801375851ee35d2544174799c8761b75a061c980787a01980623db39750385e852a7eac88781a5230cce1536554444ca231a2d6c8426ed39f7760bc0ccd88387f420793d2adbb7c