bi.bsn.com.my

- Bank Simpanan Nasional -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 45:d3:5f:1d:72:b3:4f:6d:00:00:00:00:50:dd:3b:04 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank Simpanan Nasional

Organization: Bank Simpanan Nasional
State / Province: Selangor
Locality: Kajang
Country: MY

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:d3:5f:1d:72:b3:4f:6d:00:00:00:00:50:dd:3b:04
Serial Number (int): 92814235508337167601330294281023077124
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:6b:37:9a:59:f3:eb:ad:c8:e9:d6:52:27:b6:32:61:5a:d3:53:63
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6c:2a:8a:7b:03:22:2d:7f:c8:61:89:62:36:eb:40:8b:6d:dd:ef:6a
Fingerprint (sha256): 51:15:34:dd:72:44:1b:a2:2e:7f:62:6d:d4:12:33:46:af:82:e9:96:e9:a3:68:54:41:91:0f:b2:fd:70:3a:87

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate bi.bsn.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.bsn.com.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.bsn.com.my

Other certificates including the domain name bsn.com.my

(limited to 100 certificates)

Certificate

The complete raw certificate details for bi.bsn.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92814235508337167601330294281023077124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 07:19:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-13 07:49:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kajang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Simpanan Nasional'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.bsn.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1004413900272531662559361556881112971615588080626284409706786042581543905424403371809351758787407212446327820553804175763635765676430135614672198315879184384154962888679260699206540646577502147790155619146836776946711210580848586898410582136921347527044664740328111252387315701279014084502827453128515893166924905078945696746004279252364805719785427882995231414660899740884982277909875107613738657666980737313479369354325692180827461698020431650529229709406487169194261845732384039125114500282929096136977399344466092663591535141224134730018152083638689758979825260134537384649256891740480570449949599344152967806447407133456006817144484977626422958694704744004542226244845639065729756873485247637160981249494835992897853001970229452844264881478575360532947398911172764021655558044155961493619226938755277294374785984116366941655258358642247453549060252414970886409359578101075191822147533350305092606593313256755835449958082760877724481571415560805797227166699252300276034917234733150657676963055481579138756711658190436886943791136102491556437364111645531022333555137613568666076615626788339051031194753260028862185585948349146991595805087560023164153915367700817430472315156006533428783769004537264957521182221338252170703612496531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.bsn.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b6b379a59f3ebadc8e9d65227b632615ad35363
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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