develop.hangseng.com

- HANG SENG BANK LTD -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:9f:d1:da:b3:3f:9f:b6:c4:6e:d9:94:41:6c:31:8a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HANG SENG BANK LTD

Organization: HANG SENG BANK LTD
Locality: Central
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:9f:d1:da:b3:3f:9f:b6:c4:6e:d9:94:41:6c:31:8a
Serial Number (int): 18109795496532268561819217606208139658
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cf:a1:b7:6e:de:e6:ee:c0:6a:c8:37:f3:f3:9b:e1:22:0a:22:10:ac
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ac:dd:90:cd:9b:4f:bc:ea:bb:bf:a8:76:ed:8c:73:9b:31:e1:1c:6d
Fingerprint (sha256): 08:bb:1c:e0:e2:90:d0:20:58:5a:bf:de:98:89:04:da:45:94:b9:30:25:e9:99:21:bd:ca:86:69:16:cd:45:f9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate develop.hangseng.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for develop.hangseng.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

develop.hangseng.com

Other certificates including the domain name hangseng.com

(limited to 100 certificates)
www.hangseng.com
qualityassurance-ebusiness-mobile.hangseng.com
hasecuppostlsskm.hangseng.com
uat-api.ob.hangseng.com
e-banking.hangseng.com
qualityassurance-cmb-api-uat.hangseng.com
ebusiness.hangseng.com
skm-e-banking.hangseng.com
quote3.hangseng.com
sat-quote.hangseng.com
preprod.iads.sandbox.ob.hangseng.com
origin-am6-gbbsp.hangseng.com
developer.hangseng.com
www.cardsmsservice.qualityassurance.hangseng.com
bank.hangseng.com
www.ipoonline.hangseng.com
uat.haseafepos.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
www.cardsmsservice.hangseng.com
www.prd-ins-wis.hangseng.com
e-banking.hangseng.com
e-banking.hangseng.com
www.ipoonline.hangseng.com
sslcertificate2.queue-it.net
qualityassurance-hase-dbbsp-mauth-uat.hangseng.com
www.hangseng.com
devatmpcup.hangseng.com
cloud.cmb.hangseng.com
b2bedge2.b2b-apac.hsbc.com
quote3.hangseng.com
sandbox.ob.business.hangseng.com
preprod.directory.sandbox.ob.hangseng.com
uat-api.hangseng.com
sslcertificate2.queue-it.net
pilot-e-banking.hangseng.com
chatbot.hangseng.com
develop.hangseng.com
uat-developer.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
www.hangseng.com
www.hangseng.com
qualityassurance-hase-gbbsp-uat.p2g.netd2.hangseng.com
coordinator.fl-dev.business.hangseng.com
www.hangseng.com
www.ipoonline.hangseng.com
www.hsi.com.hk
chatbot-uat.hangseng.com
click.cmb.hangseng.com
uat-api.ob.hangseng.com
e-banking.uat.hangseng.com
www.ipoonline.hsbc.com.hk
pages.messaging.hangseng.com
business.virtualassistant.hangseng.com
e-banking1.hangseng.com
qualityassurance-bank.hangseng.com
sslcertificate2.queue-it.net
digitalreceivablesfinance.business.hangseng.com
apply-bank.hangseng.com
appointment-uat.hangseng.com
uat-cms.hangseng.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
am6-gbbsp.hangseng.com
preprod.iads.sandbox.ob.business.hangseng.com
www.ipoonline.hangseng.com
qualityassurance-ebusiness-mobile6.hangseng.com
e-banking2.hangseng.com
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
qualityassurance-ebusiness-mobile5.hangseng.com
qualityassurance-ebusiness-mobile3.hangseng.com
uat-eba.hangseng.com
dco-ao-tko.hangseng.com
cloud.messaging.hangseng.com
e-banking.hangseng.com
www.enacservicehk.qualityassurance.hangseng.com
www.ipoonline.hangseng.com
dsp.hangseng.com
www.visatokenotp.hangseng.com
inv.hangseng.com
www.qualityassurance.ipoonline.hangseng.com
e-banking.hangseng.com
ob.hangseng.com
uat.securepay.hangseng.com
apply-ebusiness.hangseng.com
sslcertificate2.queue-it.net
uat-eba.hangseng.com
chatbot-uat.hangseng.com
san-12-s10.tlsprovisioning.exacttarget.com
tx.fghk-dev3.hangseng.com
e-banking.hangseng.com
b2bedge1.b2b-apac.hsbc.com
sslcertificate2.queue-it.net
gbbsp.hangseng.com
sslcertificate2.queue-it.net
e-banking1.hangseng.com
sslcertificate2.queue-it.net
tx.fghk.hangseng.com
e-banking2.hangseng.com
devmcup.hangseng.com
e-banking.uat.hangseng.com

Certificate

The complete raw certificate details for develop.hangseng.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gEE59hH02JJQnas+lwv
cSKQgwgvT62+2Ycy6Ul1S4ZAr/Kkrw7AHynU1Xdr/15kSq8mq94hYSF4O2NVMmD2
tlri2JOnsvnyV78BQ+lrqJvLXrFwbFhfYfFH1CLsm+OfyWcysqqcu8NExu82IY8r
tC45KB6wmItFVNS4qBiz+JyQugSIy2Ogq27i0UuZLJd/j1wnfw4pcKjH1K3pZtiS
YMKgpqbimBi0q0kjCn7HMO0U3XPE7ghcQ63TuDOU9djPDl+2r72IyqwSYP+5pg3r
WwMjxKiLUbNmqcGEE37JvB8e8Kjs5dHuRjsQ4BkgYSxhRNWtVdG9oH5MEYfaxAEK
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18109795496532268561819217606208139658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Central'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HANG SENG BANK LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'develop.hangseng.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27015499830580871165172396056634914230128966318694850637700496524647880491109753399588446478350197498974904773907304209693070045860580730742682341025248211746754722917432217621373903572755722523414631638828807882662612506795300495380329625815356363316522931824548238890564673749779670338738932980713149717884691544399100202629145433690687129865550353483136519710300655487084893821567281071074563174118948257875387770568528060824196404213346485925688848789229282907396437078509912368169567829048507498348626543825502538157523137778917454635678533080972028801883022315293780049384702191263516407991433425060713421933173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfa1b76edee6eec06ac837f3f39be1220a2210ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.hangseng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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