travel.bspb.ru

- Bank Saint Petersburg Public Joint-Stock Company -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 72:2e:81:2f:d8:3a:c6:c2:c9:f1:ac:c0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Saint Petersburg Public Joint-Stock Company

Organization: Bank Saint Petersburg Public Joint-Stock Company
State / Province: Saint Petersburg
Locality: Saint Petersburg
Country: RU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 72:2e:81:2f:d8:3a:c6:c2:c9:f1:ac:c0
Serial Number (int): 35337511775189856825998683328
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b9:59:de:42:ae:f0:00:af:1e:1c:da:36:3d:f5:cd:bb:29:ee:ea:d6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ba:d2:3a:1c:d3:b4:d8:7c:74:86:f5:a9:28:6d:fe:6f:50:36:27:91
Fingerprint (sha256): 3c:c0:e9:f4:13:a3:64:e2:5f:ef:fa:47:b0:e7:b8:a5:5b:56:1c:5d:f4:d4:23:4b:7d:04:49:75:15:ba:5f:93

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate travel.bspb.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for travel.bspb.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travel.bspb.ru
www.travel.bspb.ru

Other certificates including the domain name bspb.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for travel.bspb.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35337511775189856825998683328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 07:02:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-07 10:41:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Saint Petersburg Public Joint-Stock Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travel.bspb.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837438032480093791749457005307633563414965415307024750535406252679133809421155033674268877537665570320277542367616042132868681760765894386699686277511304604951579258913072525626637766080253161451264719017212064509413580786180087371681905191524868829895330441320410793720653372184408655043453428265591108938679515341889078199760902603213845508252438532385904215625951748733564499393608439939733917248237160921815765635053426677317047814490323413879223885319345007813282621612109261715702892533885986163577015793909321374786572283671394715448445782388909536828303980208037847454195523556400292947806324864471500896109629917999985928065820962768628875472443128118562044973931937380528853745989641511646167628208457093035281494176745582604570064442643380049944471580967983833448254316730037622903912590465381915400870951690078697536262910947157418321361077103292602469042452919878338031438180007231507972516831151278897827380692549616209880815919311648117017144708313481048031663867659258484775740589816262977408374349381731572514193277990992939492185057574696394163021165946942151162154234625132090385358130448545654688053737433814524349107626586434356628301616091535484116280424204993066904623938652183494881218657202556806822190319691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.bspb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.bspb.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b959de42aef000af1e1cda363df5cdbb29eeead6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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