ipoteka.alfabank.ru

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 01:7a:08:d6:91:4c:29:74:a5:94:6b:34:98:d5:e2:6e was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ipoteka.alfabank.ru

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 01:7a:08:d6:91:4c:29:74:a5:94:6b:34:98:d5:e2:6e
Serial Number (int): 1962867471597172664681300383451439726
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ef:fb:6d:c9:e1:78:5d:be:5c:8e:44:6a:f1:0d:2b:f9:27:1f:a3:df
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 14:fc:63:93:66:35:42:e2:9d:7c:32:ba:a9:c5:1e:f8:a8:3d:94:dc
Fingerprint (sha256): 10:05:12:ec:4d:2d:8f:d4:b6:01:34:21:39:7b:99:af:48:42:8f:89:38:bf:65:db:6e:2b:99:b4:8f:33:37:4a

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate ipoteka.alfabank.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipoteka.alfabank.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ipoteka.alfabank.ru

Other certificates including the domain name alfabank.ru

(limited to 100 certificates)
traveler2.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru

Certificate

The complete raw certificate details for ipoteka.alfabank.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+q1N4RugiDKJ6C6iJf
H/xZ8llThz/6i0US+L50rhkDnsMU5OkCz7guujkd7xuPDiVGtFTqi0EVmV1jw5Ie
SIwkRsaWtnxmKm4z2IutOiMTYLp4v9K0c/YmmAfHBWpGULW7XINNRAliTFieBnu6
JzfYW1fgkwJZ2pd6JAA52VgS7k2ChJG5Lvj0ciQMYfu8nq1mJ3nkuvkNtTXrqXwn
uldxb0mjMua4v6Ax75/rVulXynUXp+UI5itHVmlvWG2AhY+dSeJIQjNQ7h2HjzDU
SMe0ofRY4veZs4dXOYiLsEApXYE9E/nntySSTbRMAY8PMT8WBos8dhZ0EQUQBAw5
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1962867471597172664681300383451439726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 13:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-09 13:05:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ipoteka.alfabank.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21357779166187302304261731079432848073674313620571225929783904895837674794747799978008335242323516278689676333301994812530963283371874776447117933389502073804944407378425242920675860735879991198245323822313793290181349646940023144681525597895934644669129383552187432066558550406230544770278319391196333236084133214422488816574019497706327225681109734531814731647625179965706862162900599017711731582927750875651970651458618544900625858685155101782458149586846612546278249604153784271179941128944638138145212250390167064003738196451789938301337713250818344718527593156834953193047356008174115222045289583992143149283821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipoteka.alfabank.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							effb6dc9e1785dbe5c8e446af10d2bf9271fa3df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0034e58efe38933387bdf67e0ebefe0eb6d79c123fc74f9d1264398dbef3e2bab670d884130c1261407699529961c0960942f4c7c242d1bfe2ef10b295a07a1b2fb6de16bf45e57d847d6585af10743cdad820379b9c1560fc9d06b72cbfc66f3bd9ecd7fc7e000f420b536738a5d7ac5b3dac960b14071467c26a9e2fcf930a902f9bd43770b81b07c9be3a8599e0a6829846442a7a4afa7e7ed2a69e76cdcdb5f4c0a7e0121890381bd8647dbb21b562bd9360150fe49ae6177766ccc857572330737881595808c3d5914c7d4a8f77cdcd5aeb84b0459ac32f79daf714a68d747a1c5faf0d44ade96d0b590defac1dcec78abd3fcc6e83c10bbb9a7aa6e3630a3b06cd61d33c35e6e605bc10d10cd29191132e7e172262ca06315c505357391856b75dcd5e5ef58a52ab41fcc7906b8c5f9cb601a85e0e06b74a05edaf619ed6b93236f9d2071702cbe37377553210b7775ab899ef737f1a20fc028e8d1bcca19c05166870bac43c59aadcceaa5fb63ce2b3f3b6d24a63c5dc25fc5ea0a62f907793108e3638a5e7fe712b0021ccc817d349eb3cb733b03d6daa8c87021c1f242b4a36c5aa0f4bbe8ba5e671400f1eb9af5b613a270be5654fea8bdc14bbfb9fb09866a0b516dc096fecbbf75c9bef4ab4cfa2745a76ee6b7e3502e0847147b0a5a40850ceb52381916fe7341ca6b1324b8c5a835bccbcf4bcc20db4572869ff