baas.alfabank.ru

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 70:a9:73:17:27:5d:af:6c:21:1d:1e:0c:fb:53:9a:94 was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=baas.alfabank.ru

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 70:a9:73:17:27:5d:af:6c:21:1d:1e:0c:fb:53:9a:94
Serial Number (int): 149753368008538295297652139977184877204
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 72:ba:52:85:17:20:3b:90:f0:9f:3b:d7:86:1e:80:f5:56:34:00:d4
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): af:8a:15:6b:07:d1:16:4a:a8:15:eb:28:74:dc:8c:80:83:ea:b3:4c
Fingerprint (sha256): 11:6b:7d:19:7f:0c:53:b2:c0:c9:e8:f7:b5:59:7f:66:2b:60:69:03:1a:1f:05:bf:b5:2a:66:94:f4:9c:c7:af

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate baas.alfabank.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for baas.alfabank.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baas.alfabank.ru

Other certificates including the domain name alfabank.ru

(limited to 100 certificates)
traveler2.alfabank.ru
agent.alfabank.ru
agent.alfabank.ru
digital.alfabank.ru
ib.alfabank.ru
travelernext.alfabank.ru
zp.alfabank.ru
anketa.alfabank.ru
ib.alfabank.ru
club.alfabank.ru
pilots.alfabank.ru
emp-lead.alfabank.ru
digp.alfabank.ru
alfapartners.alfabank.ru
click.alfabank.ru
welcome.alfabank.ru
cit.alfabank.ru
ctxvdi.alfabank.ru
my.alfabank.ru
settings.alfabank.ru
reg.alfabank.ru
trading.alfabank.ru
groupib-ac.alfabank.ru
anketa.alfabank.ru
rko.alfabank.ru
sense.alfabank.ru
payment.alfabank.ru
id.alfabank.ru
traveler2.alfabank.ru
job.alfabank.ru
zp.alfabank.ru
potok.alfabank.ru
alfapeople.alfabank.ru
telework.alfabank.ru
trade.alfabank.ru
click.alfabank.ru
link.alfabank.ru
travelervip.alfabank.ru
acs.alfabank.ru
emp-anketa.alfabank.ru
message.alfabank.ru
id-hub-sandbox.alfabank.ru
mind.alfabank.ru
testlink.alfabank.ru
blackstar.alfabank.ru
ecom.alfabank.ru
travelernext.alfabank.ru
sandbox.alfabank.ru
travelervip.alfabank.ru
alfago.alfabank.ru
click.alfabank.ru
travel.alfabank.ru
alfabank.ru
investments.alfabank.ru
CC.ALFABANK.RU
design.alfabank.ru
chatkb.alfabank.ru
design.alfabank.ru
link.alfabank.ru
nalog.alfabank.ru
zp.alfabank.ru
private.auth.alfabank.ru
store.alfabank.ru
private.auth.alfabank.ru
alfabank.ru
welcome.alfabank.ru
scf.alfabank.ru
club.alfabank.ru
usability.alfabank.ru
private.auth.alfabank.ru
link.alfabank.ru
digp.alfabank.ru
rko.alfabank.ru
alfapartners.alfabank.ru
megaplan.alfabank.ru
alfainvest.alfabank.ru
guarantees.alfabank.ru
click.alfabank.ru
digp.alfabank.ru
pay2.alfabank.ru
traveler2.alfabank.ru
ipoteka.alfabank.ru
testamcalls.alfabank.ru
abm.alfabank.ru
learn.alfabank.ru
alfabank.ru
atv.alfabank.ru
online.alfabank.ru
kassa.alfabank.ru
pay.alfabank.ru
online.alfabank.ru
baas.alfabank.ru
metrics.alfabank.ru
pilots.alfabank.ru
alfapartners.alfabank.ru
my.alfabank.ru
push.alfabank.ru
api.alfabank.ru
pay2.alfabank.ru
partner.alfabank.ru

Certificate

The complete raw certificate details for baas.alfabank.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50aV4pJ2LONFxPAY5VTA
bKlfrtpwFyWYs2e2nWsu8Dj2mGdCkIi3d7zWRYCoZa+07uuIXUPTBvSQeBj9A3IQ
JOI4J6D2dOGRBSANUkU+2xW40YVh1oqrrPh9FZjdTpSLLl9il43rv7wHUqdr71+w
79gPN0eZAopzVxrnomSaBCpSmD1jt/VTTkyc0nV8DiYfRQpeChGSWkbAqle60hsp
pPxUvs9+MeMrXlLR5WYP2uy7qDUvjNYwo67niFr642YbEkgDY3rpEfU1YADmzyEi
jEzGLMwFfssGxhE+VxCoTgEk+qvwOM/4rPwz2FEvAJ3eWijYhYcHp9Mxcq2Dyf99
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149753368008538295297652139977184877204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 06:23:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-09 06:23:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'baas.alfabank.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29195855448796902717779489401869137560241456770660174523330282730457499025478939424232718561944642839635465780900768459921658645743524842670132397291586485811528918201096632326533184210643716150212263026724641054187512342718946398170385823946904183351837194532112098053722764181447328375020845359403263754000099063096638124890023936180471830565819113293051150120938852504206915604414885695288459770172199209866920932379477779650097472494512526524249651870418889783629589418575644692083677537520773600143160422210007494095448162751344888473332002545548289172730890198003490151355856031259862699284745247860767951125989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baas.alfabank.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72ba528517203b90f09f3bd7861e80f5563400d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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