DV SSL/TLS Certificate for www.birchlegal.kz

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the www.birchlegal.kz DV SSL/TLS Certificate

This certificate with serial number 07:7a:0f:70:27:40:33:dc:19:4d:f7:6d for www.birchlegal.kz was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.birchlegal.kz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 07:7a:0f:70:27:40:33:dc:19:4d:f7:6d
Serial Number (int): 2313956923103297126934640493
Serial Number Length: 91 bits, 12 octets

Subject Key Identifier: 1e:71:a7:53:c8:ac:31:1c:c9:35:a6:73:bf:28:77:8c:8e:ff:9f:12
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): 79:ef:89:fd:d8:80:ab:b3:7b:db:ea:28:30:a8:ed:3c:00:35:98:70
Fingerprint (SHA-256): eb:83:71:4a:04:56:38:55:b6:98:3d:e6:5f:54:e8:97:c4:7f:15:b2:49:33:98:15:29:8b:14:5e:40:bd:38:b8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.birchlegal.kz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.birchlegal.kz

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.birchlegal.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0npQz9yGL0J1tOGc2G4Q
D+9PMIAah+2iF7nidWIXbGwNG76DgJ5tsiMRGnrlZNcZrYp+yP8NH/d9lMuS2PNH
zc245aCecqTmVNsATr/gycKZnL0+5k1rKiL9AxJg4LCQo66Vtsql+inJzZcqSv8V
CuqnPH7p5KdZDk71CE37SQlNv44RTaXtocG4GogQF5C89xHoPkF8HfyYTh9n9sR7
u3iF2TsV0/hkbyiBuQrwN/qNck6w2jQ16V9Xecb/CMsEQ1S+WciS5MxW9g+uBQog
jjoz4rWPHk/Tvcf+EZf7Th3unCMQHG6w1IYBMGbOvj+p+JLH7VclNHB7VJNjxJet
m5jjlfdFyJKY7F67cvbwfFDdk4pTXQXe183VeLTFGKamcrDZ40EnybRe6sdn3dMF
g7WXHa1oJ3zJyw/nYlSkvVEZllaD4hG76PjwUvshrUvy15u4Qtv0bb8uBGyBNiWe
d4wG7evc+MAGfZXdAMQ4ZB85T8X58IZSL5LI25mnaykQi4oW7Oc1bjwHu8l00Ulx
vbHJjgHp1/U0liYHkgQKGf50DSZOTg+Bugbal5SZTdMtkoKg8S8bGBjeiFmGByiU
etFRI9feJj6lwdkabO+RCK8dPgYBtfdaONtIMJws/ST2bwKnRefN8rgUzmR8FP0E
eovj4GA4BlcXMAjjcU4yOn0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2313956923103297126934640493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 07:35:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-16 07:35:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.birchlegal.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858674490239430907023775076801119034107904372020133148340349895971562649101571212731447955100055044624285834730094009741781492213245117535529489909485771114430348135366510880964183304709969190036731481286661181256986343676305845074905515583211978137760724120384170703812758446672257134829205146579305043228259409309175828849836267463527312465707196066759536344246541536034950370411314612730071206120250000434255175444273793327151050742578905493196239010623567939271538587856814268703727603536064544278071603632566947406328715673759012864331673899685957088003088144302521279355094524681065903253295160294611980044758584116077758948405900168114670902549604690994441430468282253706161635098044030112992823931537670434659894651143485245998157889704937638242986270490322833864416495771038155145757438883335115875874590005392113280266038308219429879244377295418399093766696890733222005856905284706763087375644395873402120136968816079366920583073379845448773983126159312715061804524354591073126398795277133297343605740632468960153480120845253855461427650159641377577239585722578936728376390878936828887801516279648924305032647873388273634528166178418338578632771880919930935736483564756428937193467366376254106227108186639208220644114315901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birchlegal.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birchlegal.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e71a753c8ac311cc935a673bf28778c8eff9f12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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