*.alfa-bank.by

- CJSC Alfa-Bank -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 7c:cc:10:92:71:83:78:27:83:24:7c:3e was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CJSC Alfa-Bank

Organization: CJSC Alfa-Bank
Organization unit: IT
State / Province: Minsk
Locality: Minsk
Country: BY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:cc:10:92:71:83:78:27:83:24:7c:3e
Serial Number (int): 38622840344316047008765082686
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c8:35:f7:3d:ea:94:f3:94:2e:c3:49:3d:71:54:5f:de:54:48:56:eb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): b1:5a:25:8e:e7:66:37:c9:02:e6:6c:86:6f:39:2f:4c:cf:be:23:4e
Fingerprint (sha256): 79:0b:69:78:df:ce:c7:96:c3:37:41:9a:0a:cd:40:bf:01:c7:62:75:88:f7:ce:ca:a0:5b:8a:2f:25:1b:c6:54

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.alfa-bank.by

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alfa-bank.by

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alfa-bank.by
alfa-bank.by

Other certificates including the domain name alfa-bank.by

(limited to 100 certificates)
*.alfa-bank.by
webmail.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
webmail.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by
*.alfa-bank.by

Certificate

The complete raw certificate details for *.alfa-bank.by in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fyMV9prA4kYBGsm88U8
vH+l+IwK70HNgEfU7j0zUiGC3oL3f/zd6FgthA0nAvjUF7Fb8PbZAxv+itxrKAo1
7iYhtgCjnUawdQsConH91NgbUJ5aCCizf5vVPCsaV388QzLh2HJZp9EsvKQ/69LN
M35n9ZzDZRTAGXAI2q6FXh6nlb4JY5bFbjBAA8mSkSo2vAXdO+axWeUT34WypV7v
az+2Sdrj2q14nQhWbP8Q0Pplw6eDf26g44YKM49aIc6zlt6JKjKJkQKsu8UJQnwu
5FaBNHbZkYt03VD+GAMSYzvOULoz/6Wlh8eexe5JLCDJWxKCjPJHlyP6heCqAIdS
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38622840344316047008765082686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 08:20:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 08:20:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minsk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minsk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CJSC Alfa-Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alfa-bank.by'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26508341904512253463319518185964686812798393637958038222486097913287330801349402811516371314756751506866459718492547003485553540285898632841789100156358742524827029753519174782790150960918694033120266183198284669409061944454273115379609040525889226570513118505206678067902926638811658649334545263233862747973533356545625529050133167621452060165788841410433383098391161540385675182611776420586750577924057485339338325204686294796247125691846241588586225461770628057997898906309196110110722611302525231688484656471342319401170629854408773154040706929154982544031360906703498609264698028647306613251333176502850997932799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfa-bank.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfa-bank.by'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c835f73dea94f3942ec3493d71545fde544856eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000180ad0e92940000040300473045022100b44eb7ed15fd8e288fd1e9a5e3fc0fec130962f0139344a044afd035bf94638c0220168f0fc91a46faffdb1f2e874116249fbf26d078be799be2d24f8f938b077f580075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000180ad0e927f00000403004630440220731fce219e1dab1fbc174edffca0d9adb853b5fd8a9896bbf30b93c03b406fa002207003bbe91d89236e19be163b23a2dc09234409c0664cecf6817c8e5721925d86007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000180ad0e92a6000004030047304502205cb6997638151d85074c1c2589e4dd3244915ba109219e9cf86ad4605e4833420221008db23c8cfaaa93a535b361ce709393a455e1887f2d3a2d44f4064824cf5a46aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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