vts.bspb.ru

- Bank Saint Petersburg Public Joint-Stock Company -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 02:ea:4d:1d:08:6b:0f:16:bb:82:dd:40 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Saint Petersburg Public Joint-Stock Company

Organization: Bank Saint Petersburg Public Joint-Stock Company
State / Province: Saint Petersburg
Locality: Saint Petersburg
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ea:4d:1d:08:6b:0f:16:bb:82:dd:40
Serial Number (int): 902222819213867629710335296
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: f8:31:03:30:93:6d:d9:14:26:a1:b7:cf:44:31:43:70:98:e0:66:d2
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 7b:44:d0:00:fb:35:c7:8c:8e:73:d4:bb:9e:5c:64:a3:5d:5c:47:6c
Fingerprint (sha256): 15:fa:4c:6c:25:49:70:2a:51:59:9a:c1:36:92:45:a3:14:7e:5c:47:e0:da:03:6f:3b:85:b0:f1:9c:0c:b2:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate vts.bspb.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vts.bspb.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vts.bspb.ru

Other certificates including the domain name bspb.ru

(limited to 100 certificates)
acsemb.bspb.ru
www.bspb.ru
acskapital.bspb.ru
travel.bspb.ru
acsconst.bspb.ru
exchange.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ibank.bspb.ru
www.bspb.ru
ap.bspb.ru
*.tz.bspb.ru
travel.bspb.ru
www.bspb.ru
sbk.bspb.ru
exchange.bspb.ru
mpitest.bspb.ru
acskapital.bspb.ru
wab2.bspb.ru
acsemb.bspb.ru
smsap.bspb.ru
vts.bspb.ru
*.dev.qdlocal.bspb.ru
i.bspb.ru
acs.bspb.ru
mpi.bspb.ru
vpn.bspb.ru
sbk.bspb.ru
promo.bspb.ru
fx.bspb.ru
acsonego.bspb.ru
acsemb.bspb.ru
acstest.bspb.ru
acsalex.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
credit.bspb.ru
acscity.bspb.ru
credit.bspb.ru
mpi.bspb.ru
mpitest.bspb.ru
acs.bspb.ru
acsonego.bspb.ru
acscity.bspb.ru
itogi2023.bspb.ru
itest.bspb.ru
travel.bspb.ru
sbk.bspb.ru
www.bspb.ru
icabinet.bspb.ru
*.test1.qdlocal.bspb.ru
*.test1.qdlocal.bspb.ru
exchange.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
confluence.bspb.ru
i.bspb.ru
acsemb.bspb.ru
sbk.bspb.ru
promo.bspb.ru
acsemb.bspb.ru
sip.bspb.ru
mpitest.bspb.ru
idemo.bspb.ru
acsalex.bspb.ru
sbk.bspb.ru
acs.bspb.ru
acs.bspb.ru
mpitest.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ap.bspb.ru
acscity.bspb.ru
acsconst.bspb.ru
acscity.bspb.ru
acsemb.bspb.ru
www.bspb.ru
acsemb.bspb.ru
m.bspb.ru
sbk.bspb.ru
capsule.bspb.ru
acscity.bspb.ru
acs.bspb.ru
idemo.bspb.ru
sbk.bspb.ru
www.bspb.ru
exchange.bspb.ru
exchange.bspb.ru
sso.bspb.ru
acsonego.bspb.ru
acskapital.bspb.ru
kfp.bspb.ru
exchange.bspb.ru
exchange.bspb.ru
*.test2.qdlocal.bspb.ru
acs2.bspb.ru
i.bspb.ru
exchange.bspb.ru
acsalex.bspb.ru
acsalex.bspb.ru

Certificate

The complete raw certificate details for vts.bspb.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qTInVj0L1540DpU4Php
Cs+xiqWXllAkb+r4afsIx6QAUzMamhl1wEZU4bQE8FqVCPX7eLC4k4CHFwTkDbCU
8N9ofmmfW0elL2IA4uA1Csz5baCYyltg6Jt3j6bhZSdQeob1bmznaUgWMRHXIO8/
aXxwpi29gFO83mqigEpldaV+vZONYYAzDopbJ24tN+RusAdSWY2zHs9LWXAB8etV
RZNnzKOyWwvN6w2ymOozYv6mJfJPPeIL3erv7eDCqPn286a4ZjdD5HSwuERM93jQ
HCe81Styjc+gmXiTFa9QI5BlzLUD/NxiNcHQ6AtpQAAHaH5Q6xy0A6tJJ4P5DNoO
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 902222819213867629710335296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 07:41:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-17 07:41:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Saint Petersburg Public Joint-Stock Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vts.bspb.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26591301889668277326201546381878248966305715444753962437679787777382174690176627925787863189897525471103409505662843017514382919099977465292910908185080391329294304459732810463942744702348591015700032494402771906339035616649179566660918255232588713473728364282405188162762773224248323634761129930491556160328707844990208574117853097644922370988820046932456518999619939188208170888743515624354040921614561340890667852228190157398059505022124146846735134076502276948268753788029703426178779600031906993171351524124082605576473534208430245328822124648477917103841876076055822788527930845337122736194703945660779565026881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vts.bspb.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8310330936dd91426a1b7cf4431437098e066d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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