DV SSL/TLS Certificate for www.vdohnovenie62.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.vdohnovenie62.ru DV SSL/TLS Certificate

This certificate with serial number 29:2d:40:61:e8:54:ad:9f:bb:6c:42:6d for www.vdohnovenie62.ru was issued on by GlobalSign nv-sa.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.vdohnovenie62.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 29:2d:40:61:e8:54:ad:9f:bb:6c:42:6d
Serial Number (int): 12743591102088081554096800365
Serial Number Length: 94 bits, 12 octets

Subject Key Identifier: 50:0a:e5:cf:4b:99:c8:77:cf:e8:5c:ee:ea:a8:ff:bb:5f:b7:1e:8e
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): 3d:d4:6e:01:c7:79:8e:64:2b:2c:13:2b:ed:41:25:89:05:22:f2:58
Fingerprint (SHA-256): e9:d1:7a:61:9c:00:aa:08:47:d8:5d:ac:30:5d:35:84:0d:c8:a3:fc:59:5e:ac:81:0c:18:f9:05:8b:bf:4b:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.vdohnovenie62.ru
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.vdohnovenie62.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.vdohnovenie62.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5cGSqPHle3zEYSdDRwVF
fzXvpWetCw8CbZBYi/MslzP0zrSEZLLKU7rEG7tfSGRpip544AbCELCNnMtiy4H/
nI0h1wcGbzwWvcQUrrHFB2cgBCLvUpfOf3QHuztTeU69zLWzE9Dx6ih0QNr9o8hX
zHr5fsAyhgMAzYm+mhBYMQO3az/TC4YKQWXtnzN49nfJaq0f7r6+XgULALkQW4hD
hMriv+5PokaAWA5BDktZ889F27eTQG/FLRTD5efnNyblZTKtBVDHbjjgE+twxJom
A09Db5X90F2yLAZvwxuO6znmHiLopc+4EUh5VEwd4pjn9a4e6FgPhNFybByvK99a
/QXOCZMhJ+43symHeXoMwcw/Gcugn/WciaDJIqbJtLOrBoaERTxPPd3ecLUqFFE7
wUA9WsqxB9/3yCXLxROMa4PyrIqXbcAVNChhJAREzvhr/w9/Xyqk3Fe9ZHIeuu/o
3dFmfUNrg3mTfyzgTuFV8WDSX8ZNLqCj0THUuWZbhDf2wq1TLfgmezUthT2uNhat
EqtYg7HZFzfSkS8SdBehFbI3rggnuGmyNrixawmSXwrpfCM2+Wx1iID060Or0B7T
N2ju1C3Hm0pDwOKzSk9J9a0KcdpS43cW2gze2DXttJMhZWPsD5V2fa/ZUDRCW2BO
h/LBWQCjLTDsg9hi7nf8jEsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12743591102088081554096800365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 13:26:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-24 13:26:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vdohnovenie62.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937323290381407120196233549613150611875762630998404706109227161965673569625199199227865260192737635976466693445117859278384585159736284582657651994870634273189452230172573549061901892712580864032899758929447411169865978491428637871435317083666296793717615849096072900144245481710411803757595916934623331086846291453531574579727004971159123118217807788018239753467710404681638568619084642487039010289737243853576854395165910831460097787923315791476560190400951602417169578605188368249381593626644209066154124571510408962018863388607435565381839948620394006040915466406600146270669679454779466172983481345746600770775961071525365736371702089189467030022810777725658746578966387317197307618597341576101648363593643665893566773130489789989709014007953948791636535188677000225542096500541186835771015235231288622698093753886734058608935285880813926006931228923008735618816021913549774974482982891854310303073978352830464084427175625883146986348953020923760306647751559815423845811870292515179640351460000068752548282029414385450905201817393909180740136697820272555900529392881970886992468081054633867232721323038582373471417940287780644660744724305338454164651077705883163819842293817971752457614724719133946244751237466475192216941530187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdohnovenie62.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vdohnovenie62.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vdohnovenie62.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.vdohnovenie62.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdohnovenie62.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							500ae5cf4b99c877cfe85ceeeaa8ffbb5fb71e8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf000000195238a1cda0000040300473045022100a7f8e52532772bc6d120c12934491621939af73e0bdcd06012f9e2f5e3c49bc2022038d1c327afc66c3eea109a37c740a28be6e5a624310851e3f7fffed678af3086007600566cd5a376be83dfe342b675c49c232498a769bac382cbab49a3877d9ab32d0100000195238a1dfc0000040300473045022100ab8877ee6f33d3fb31d5489c72c825e023b8cc16eede53a9adcc094e5d5a1a9c02206ce2a3100262de4023f5472cc10457cca51ab1cc8759dc7e30ac7ad02a02e5a50076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000195238a1e400000040300473045022100c04d742c38127cb0e816ae9a80bde540bd2f35148413cda7e873b064cd8ae56f0220354d0b0a3b263ee28400f9a3c131657c07c63f95afb47024e064eeb36d9bef58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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