DV SSL/TLS Certificate for www.invite-studio.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.invite-studio.ru DV SSL/TLS Certificate

This certificate with serial number 64:c9:c8:fc:4e:ad:df:96:fe:85:3d:83 for www.invite-studio.ru was issued on by GlobalSign nv-sa.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.invite-studio.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 64:c9:c8:fc:4e:ad:df:96:fe:85:3d:83
Serial Number (int): 31192444199422561185981349251
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: 7e:59:6b:7d:2a:4b:6c:32:e6:03:77:c4:5b:c0:38:75:c8:74:52:49
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): 22:5e:ac:bc:0c:0f:4b:be:b7:87:39:ee:72:8a:ba:35:f5:8c:1d:63
Fingerprint (SHA-256): 1d:c7:e8:fb:29:bc:26:b7:4f:5c:85:1a:89:7e:93:ef:ce:7d:8b:16:4e:20:64:50:32:83:e4:6f:4b:9a:52:b1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.invite-studio.ru
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.invite-studio.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.invite-studio.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31192444199422561185981349251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 07:35:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-16 07:35:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.invite-studio.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757710626246517423155529843604326313511639480945079109465080727806550663978957007708390313752771074192230907142174754581096020808345884918296939807027670714619482639786749973487662464682262720430564373081395168163574765127230909950042843438305634015379419643966576059962185387847104239087261156354849585262255315019251088007530689019937905864668568888359254870917924230116852072148665611643677894405974288150806154722862824793099041300589771003536944714315220999037263425622863451197274264943280559105291974624558453381223309706441455219707590695005986186017927123456971276412706460843361774499734266114037575994716115471261547777365843711815845433488015417501931260602882356941844914751915247475289081793041882596847256785343764906069790284335135317345568293413028594768649509196145002663393658276069577209106722607621137752704805543439136226500307475286589500134647902708431814998960393862693051692212711877395486125025701743297947508275569405681220071870985500939796274402742129769735936777354050186217877877270501438621465187641561458306241790582144677829473337125534696663976210703914654820516311437565443073760562063234936327670589936499283024785036550336677498879279213847302824188880313978305371534229182261785822852379621533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invite-studio.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.invite-studio.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.invite-studio.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.invite-studio.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invite-studio.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e596b7d2a4b6c32e60377c45bc03875c8745249
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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