credit.bspb.ru

- Bank Saint Petersburg Public Joint-Stock Company -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2f:f0:a7:51:bc:83:e5:3b:1d:06:58:29 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Saint Petersburg Public Joint-Stock Company

Organization: Bank Saint Petersburg Public Joint-Stock Company
State / Province: Saint Petersburg
Locality: Saint Petersburg
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:f0:a7:51:bc:83:e5:3b:1d:06:58:29
Serial Number (int): 14836727801283591376350894121
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: e1:03:15:94:d9:25:95:00:1c:fe:f9:f0:38:96:39:e5:a1:c0:82:ed
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): a4:ed:a0:d3:a5:d7:26:ea:62:d5:e8:5e:66:dc:f3:40:47:54:4a:c3
Fingerprint (sha256): 31:06:18:82:84:63:31:b6:fb:1f:71:ad:d8:40:15:ed:db:c2:6f:de:85:07:42:47:0f:92:b5:71:de:82:4b:29

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate credit.bspb.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for credit.bspb.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

credit.bspb.ru

Other certificates including the domain name bspb.ru

(limited to 100 certificates)
acsemb.bspb.ru
www.bspb.ru
acskapital.bspb.ru
travel.bspb.ru
acsconst.bspb.ru
exchange.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ibank.bspb.ru
www.bspb.ru
ap.bspb.ru
*.tz.bspb.ru
travel.bspb.ru
www.bspb.ru
sbk.bspb.ru
exchange.bspb.ru
mpitest.bspb.ru
acskapital.bspb.ru
wab2.bspb.ru
acsemb.bspb.ru
smsap.bspb.ru
vts.bspb.ru
*.dev.qdlocal.bspb.ru
i.bspb.ru
acs.bspb.ru
mpi.bspb.ru
vpn.bspb.ru
sbk.bspb.ru
promo.bspb.ru
fx.bspb.ru
acsonego.bspb.ru
acsemb.bspb.ru
acstest.bspb.ru
acsalex.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
credit.bspb.ru
acscity.bspb.ru
credit.bspb.ru
mpi.bspb.ru
mpitest.bspb.ru
acs.bspb.ru
acsonego.bspb.ru
acscity.bspb.ru
itogi2023.bspb.ru
itest.bspb.ru
travel.bspb.ru
sbk.bspb.ru
www.bspb.ru
icabinet.bspb.ru
*.test1.qdlocal.bspb.ru
*.test1.qdlocal.bspb.ru
exchange.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
confluence.bspb.ru
i.bspb.ru
acsemb.bspb.ru
sbk.bspb.ru
promo.bspb.ru
acsemb.bspb.ru
sip.bspb.ru
mpitest.bspb.ru
idemo.bspb.ru
acsalex.bspb.ru
sbk.bspb.ru
acs.bspb.ru
acs.bspb.ru
mpitest.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ap.bspb.ru
acscity.bspb.ru
acsconst.bspb.ru
acscity.bspb.ru
acsemb.bspb.ru
www.bspb.ru
acsemb.bspb.ru
m.bspb.ru
sbk.bspb.ru
capsule.bspb.ru
acscity.bspb.ru
acs.bspb.ru
idemo.bspb.ru
sbk.bspb.ru
www.bspb.ru
exchange.bspb.ru
exchange.bspb.ru
sso.bspb.ru
acsonego.bspb.ru
acskapital.bspb.ru
kfp.bspb.ru
exchange.bspb.ru
exchange.bspb.ru
*.test2.qdlocal.bspb.ru
acs2.bspb.ru
i.bspb.ru
exchange.bspb.ru
acsalex.bspb.ru
acsalex.bspb.ru

Certificate

The complete raw certificate details for credit.bspb.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvgw8yKz5vNkG+52VKZ8
OWnpD9najUoS7zIXcagvBJ+3k1udMKRE9wY/OuCA8jdRHjONdCWYFKji2vDJ0nAN
VHEL1mCqWeRjZjz3bWw6crK19roCBQQNZl3pUKJdOvAfM+l7Kf5W1SZOYNI16y8f
CmGqeTqHTHJVVlXAPafZ+AAQ/1du91CuxENNLDiLAq9YQe58iL6lXqbaTiTy3rQc
8LYSjAkoZjK666wjbS8d28ou8XVFiijft5kuk52TS5D0Cm8GR5p8asZgbk09PZcU
VNBWrt5Y4t0uzvwJe4A+ik1AvXeJAW2KAOX4iwRbK2SNRx0WKFXb0NoQCynKTb8s
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14836727801283591376350894121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 11:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 18:16:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Saint Petersburg Public Joint-Stock Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'credit.bspb.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23602712370765387035586898383660051153120186042512440806344088573162638514760324111516832239764344107525741473735969102836696853605727472441342720123356004538730798609828282168607672520856025181220444195877375609997227961386803249844722868791079485105481415122726339559143605138733718626838264293154658841571744071469387632382594415704200303459923474330412862662979403116633720644927658285458883895270999027508124428784510749391596878186000028210330439359459680882555773412723796881209686535487539010992166014176318619459084706384378431948773950008618506598339642694389631700620085190332223556895294726711232367111179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit.bspb.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1031594d92595001cfef9f0389639e5a1c082ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d099e4cb5297d1f001df2544ee348ba9db65bc638df8be33fcf13d9838e1b6b39dca93713ae64890fde53b3911f73427bfd20edfd9b49ab4e8410025a99d50497064fb0086328ef722a19cd883f9388538e4731e3a668184506b348e9cbf830150eea10a59581c5421657d76c3f220188a7c02e8fc35d2a4e4bd302abe3864aec52d4b4ccfef530ee7b84579e1d22af3b5921c5e1dc8d9f3b0d9fb6de94ae6f2695c555c073febdf7a7e68f79d05beb134df4aa2f6962ae890b9e1293b708b0b17232e079a7df8a8c6cebeff3943826c180f8e24f787be93105cbcf72480805269687f1dda1e121e6c66aad1d727142c322776afc71adf25695f7c676efd871