DV SSL/TLS Certificate for www.lignumc.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the www.lignumc.ru DV SSL/TLS Certificate

This certificate with serial number 63:f8:b1:6d:b5:ea:1e:f9:ac:9f:ca:47 for www.lignumc.ru was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.lignumc.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 63:f8:b1:6d:b5:ea:1e:f9:ac:9f:ca:47
Serial Number (int): 30939667458248485523731499591
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: fc:0b:a6:16:4b:7a:c9:c7:c0:71:b6:bb:62:ce:8f:f6:f4:9d:2f:43
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): 17:d7:15:13:d1:c9:60:bd:54:67:01:27:36:cf:64:7f:b0:98:58:91
Fingerprint (SHA-256): 13:f3:51:ee:80:e5:1c:6b:84:a3:55:b5:ab:a8:c5:e0:dd:19:58:39:1c:df:a7:ce:bf:b9:d1:31:e8:00:b0:cb

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.lignumc.ru
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.lignumc.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.lignumc.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30939667458248485523731499591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-25 05:14:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-26 05:14:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lignumc.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668336960868217481236928330640897558571706576863566695883515392724791761724296316693380068387911639116291219362554538756001324989207631161660561279672540600797640113900740610973238977659463244172372777306605318714007602160620122802364770770448546690048214010348521028360128073762663944730757154511779387796845457545563045683558017539022670078282983655596234718246032285234420353945954116001556530657839353552601738695775927595862575384800365411764999729580918877223091966034212442457296956355172989721822922025480960156078807453729144401563265017076765650956628830882355940710050904163487539890731965963651922049881695282212132246124860325987388554802958002084291180159891800629585194820126064879159522440104742416630229877753603571419191547470518566490920279071234902325046918364978951251023669347725653712612242181801470969914578128524866627390209376895076843611533937122882684843342430230097176516526103418697175132366055101399949624959695113677343254920609835153449732981695190481676168682206711411450143627733366038007400820908718385650454188850249390141456490123012159119775266191734807461328704593922533133640077147690064957929716593161453467523629620702437701602580110874904010488000841163703412279996170240502439254395934723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lignumc.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignumc.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc0ba6164b7ac9c7c071b6bb62ce8ff6f49d2f43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00005a3723b3f41907a09e65b13e880c590f229340324fa9298346b175016bd7d5b92cbf83914d4805087d1080ce063e1f99f3de8816f111b8f210584227291f813fe3a657679a9949d07004c0a594a197506368e5ca4be594d067427009f7a41a55f557d42b2ef02c0612b5e66eae34edc081efb6fbecdd7d2d2e72f1554d92031984f4edad504e32791efa5ec78ed55608d1fce81c10beea2edbb6be4285090080d14840d07e8c3814ac96cdeacc1e1a5ec7feff9908d9486ffa9c7e88f65c37c258ebd211f318867eae320865e455ed74565a0f985ea552c6c61e57c935ca84ffbf08233df6200826c7b426ee7858e98c3a6d75a62cbbf25afdbbf3317cfb53