itcareportal.bsn.com.my

- Bank Simpanan Nasional -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4a:75:d9:0c:e0:b3:99:3e:ef:21:1f:f9 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bank Simpanan Nasional

Organization: Bank Simpanan Nasional
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:75:d9:0c:e0:b3:99:3e:ef:21:1f:f9
Serial Number (int): 23044360038753611877506424825
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 79:b5:94:78:c2:9d:e8:ed:1d:21:a6:67:dc:7e:69:33:4e:42:04:fb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 71:35:8e:25:14:5a:c1:73:41:db:9f:2e:ae:25:ab:ce:9c:f9:4b:07
Fingerprint (sha256): 88:0d:ab:26:16:f4:2d:2b:de:e3:b4:2f:41:f6:f4:49:51:f0:c1:72:6a:40:3d:f0:2d:90:ac:7d:75:77:c1:3e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate itcareportal.bsn.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itcareportal.bsn.com.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itcareportal.bsn.com.my

Other certificates including the domain name bsn.com.my

(limited to 100 certificates)
hr4u.bsn.com.my
fpx.bsn.com.my
rms.bsn.com.my
*.bsn.com.my
bi.bsn.com.my
boardpactest.bsn.com.my
www.bsn.com.my
salespro.bsn.com.my
hr4u.bsn.com.my
www.bsn.com.my
legal.bsn.com.my
*.bsn.com.my
legal.bsn.com.my
elearn.bsn.com.my
secureconnect.bsn.com.my
boardpac.bsn.com.my
smtp.bsn.com.my
*.bsn.com.my
bi.bsn.com.my
*.bsn.com.my
www.bsn.com.my
boardpac.bsn.com.my
crp-core-prod.bsn.com.my
boardpac.bsn.com.my
ecs.bsn.com.my
smtp.bsn.com.my
elearn.bsn.com.my
crp-core-prod.bsn.com.my
digo.bsn.com.my
hr4u.bsn.com.my
hr4u.bsn.com.my
ecs.bsn.com.my
www.bsn.com.my
itcareportal.bsn.com.my
crp-core-prod.bsn.com.my
fwd.bsn.com.my
legal.bsn.com.my
hr4u.bsn.com.my
salespro.bsn.com.my
bsnteams.bsn.com.my
elearn.bsn.com.my
boardpac.bsn.com.my
mobile.bsn.com.my
legal.bsn.com.my
boardpactest.bsn.com.my
rms.bsn.com.my
crp-core-prod.bsn.com.my
bi.bsn.com.my
ecms.bsn.com.my
ecs.bsn.com.my
*.bsn.com.my
elearn.bsn.com.my
mobile.bsn.com.my
basys.bsn.com.my
secureconnect.bsn.com.my
itcareportal.bsn.com.my
gini.bsn.com.my
mobile.bsn.com.my
smtp.bsn.com.my
www.bsn.com.my
boardpactest.bsn.com.my
banca.bsn.com.my
emm.bsn.com.my
ecs.bsn.com.my
legal.bsn.com.my

Certificate

The complete raw certificate details for itcareportal.bsn.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA28gV9aZ24ThXFNJlVBEU
HWtXBbkinQEAxkSaw8c9w4M+jN1hgMxqOBGP0VbL6sMhLL0tv4v4qezyfUPOoKM3
SLjrXPOdFIiHYOA7J2ljpfxB2ocH71DtG+VA6xqUWAHenKjigFeii6TcrE8IvSp1
5VaO6Dteh7jmQkqjAFxuW3DLGhEMoXlHgktnxAPlZhth+WxPP+z8nrthsIBqcsnk
2XaNmnAD/hvdUOTGrM8XRk+yJDO1f5eFDenNwzpMW6owL1uXOi9X0+JcCJ9Rf5cf
PB5xFNhZ+9V7kwqWfAiEDWuGysOIPf3bZrg984qSTPZ2habzseP9Pl/c/Gjy6nCh
PNS4Ku09OOYIxMOiFpfETGDrsjj0x1+qGdPc6vPcEYctC4zLpr/Qvn3Xz3/nHrex
6tLMnJRBraXE97HiHFiMJOSMfTgIh8uG1BvT6ilek1ssCUsvlad5rp5QcVRApbmP
ugImNEHw22ow2CRawcXT6dv4vv8fz6dlb1iImIUksvMatwOVXpXS24W3BTHNv8gV
67vBk5lqxHasG+xfUp8zVLEO5o8RWg0LKNJ0VYZ5aCGeSRyvLBqkhhgLbL43nQZR
eK2ofBtNPcriWFeIAA1I1iAdUD/185U/sSeRdoJVqJ9bUYlpKB7DuFBGcTqAgQdl
lZffNqbI7pVVYUAhRgV3Me8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23044360038753611877506424825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 09:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 09:46:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank Simpanan Nasional'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itcareportal.bsn.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896630639817266565130912191882743984198231270049347651663443973169128025977762876048609027258770620599790509257634308506722077263375807151027734875961708998656313177404184658605787755083565046800369264581650346085186502846659359700373625813163710809140883952030366745358737109342609777470368446947597279796191314687456944316416991647846137380496897258817488518321305793440517431847239547858546584583602162622960798377458698543391090604837744837352653682701456905574675036815451031196736758527800475051725637389320209098656747825727238626157887433655171062567047387626082024134939697490974619843979182902132452151200353325309001031390381546217725302603320846854535126555896160626904208892074327806827009564924187314973134516686586714476811761870002214373751666944881169091424298339295742114794821234927195955763083471179040323920512182667798968655818015075805054875898789464299494099668186260247320572573319481317463531309047729208880623170754887332125500445774452933679139555205606294886864081684930370509551775397657051227238736975743839444444762354331151860318655222304889460711625432035270863534255705219476137467601287124777303007345429012956864528912480074003763521990015331507806842557219456454252831795154054163559354205680111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcareportal.bsn.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79b59478c29de8ed1d21a667dc7e69334e4204fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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