dbo.uralsibbank.ru

- OPEN JOINT STOCK COMPANY BANK URALSIB -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 6a:17:4c:0b:13:76:5b:df:b6:55:54:6e:f8:2e:2d:71 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

OPEN JOINT STOCK COMPANY BANK URALSIB

Organization: OPEN JOINT STOCK COMPANY BANK URALSIB
Organization unit: Uralsib IT
State / Province: Russian Federation
Locality: Ufa
Country: RU

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:17:4c:0b:13:76:5b:df:b6:55:54:6e:f8:2e:2d:71
Serial Number (int): 141019132721610351042552135772210605425
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 8d:f1:f3:ff:5c:ff:d5:fe:a0:3e:b0:c9:d7:72:e3:a5:12:07:06:13
Fingerprint (sha256): 99:c4:95:87:ce:62:80:25:ac:b7:0a:53:9a:2c:95:86:df:ce:55:e1:85:c5:9d:3b:78:af:40:e1:13:9f:40:6e

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate dbo.uralsibbank.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dbo.uralsibbank.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dbo.uralsibbank.ru

Other certificates including the domain name uralsibbank.ru

(limited to 100 certificates)
dbo.tomsk.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.kgd.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.uralsibbank.ru
dbo.ufa.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.ekt.uralsibbank.ru
client.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.vlg.uralsibbank.ru
client.uralsibbank.ru
dbo.urd.uralsibbank.ru
ca.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.arh.uralsibbank.ru
dbo.perm.uralsibbank.ru
dbo.arh.uralsibbank.ru
mgate.uralsibbank.ru
dbo.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.uralsibbank.ru
dbo.chel.uralsibbank.ru
dbo.nvart.uralsibbank.ru
dbo.spb.uralsibbank.ru
autoexpress.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.ufa.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.izh.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.barnaul.uralsibbank.ru
dbo.ptrz.uralsibbank.ru
dbo.spb.uralsibbank.ru
ca.uralsibbank.ru
dbo.astr.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.sterl.uralsibbank.ru
ca.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.nvart.uralsibbank.ru
client.uralsibbank.ru
client.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.vlg.uralsibbank.ru
dbo.ufa.uralsibbank.ru
dbo.ufa.uralsibbank.ru
dbo.nnov.uralsibbank.ru
dbo.uralsibbank.ru
dbo.uralsibbank.ru
dbo.chel.uralsibbank.ru
dbo.nsk.uralsibbank.ru
mail.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.tver.uralsibbank.ru
dbo.uralsibbank.ru
oplata.uralsibbank.ru
oplata.uralsibbank.ru
*.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.nsk.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.surgut.uralsibbank.ru
dbo.spb.uralsibbank.ru
dbo.chel.uralsibbank.ru
dbo.ufa.uralsibbank.ru
dbo.ekb.uralsibbank.ru
dbo.ekb.uralsibbank.ru
dbo.samara.uralsibbank.ru
dbo.uralsibbank.ru
dbo.tver.uralsibbank.ru
dbo.spb.uralsibbank.ru
mgate.uralsibbank.ru
dbo.urd.uralsibbank.ru
dbo.uralsibbank.ru
mail.uralsibbank.ru
dbo.uralsibbank.ru
dbo.uralsibbank.ru
ca.uralsibbank.ru
dbo.irk.uralsibbank.ru
mail.uralsibbank.ru
dbo.samara.uralsibbank.ru
dbo.uralsibbank.ru
dbo.surgut.uralsibbank.ru
dbo.perm.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.astr.uralsibbank.ru
dbo.ptrz.uralsibbank.ru
ca.uralsibbank.ru
dbo.ekt.uralsibbank.ru
dbo.nsk.uralsibbank.ru

Certificate

The complete raw certificate details for dbo.uralsibbank.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ7leAxm4FYoRngzmYcb
VXOlNh97q2yDFYuPF3JLDaUXy9Zzn63l0+Xg+RFTyw2IUpiKo2jznBqhIgpLNtNh
ly1j3QBDOuGU/44Hf/UOI2QMSjZmyxOlfNz2cSxHHaC/fB6t6RcODCA6gmSyQpM4
11S+GqbvNk2eaPUMckCvZiYXeKFIpN3dFq2Qo/0lNW6AoKAvlmuIEMEi6Ez6ZvNN
nBgijtDJJDIN2gZgdI+kv2yWVHb+H4iOrUoA/pW4UIIO9pqf1PTR9fw1tjqQAI0g
09QVEDDUOpjpnXym1tR70k1iZhXD9L9/DmQRGiWtST0wMonrYCj8zZnXLgu4AM+H
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141019132721610351042552135772210605425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Russian Federation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ufa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'OPEN JOINT STOCK COMPANY  BANK URALSIB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Uralsib IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'dbo.uralsibbank.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22296296390963555447506205747735418331091582248930070057669220906325465747640835521708279107962076160348719539027023050061706495068716499113722818063116297468865250020401086179955434846988379085229649241456659872667959817083229547475354832339110416822597873833268284700215393261982796642796338310546698818279288086595657340202182363875751462764809456734084630449520975698760566952967076978781268152304845046238187505724149225149462753813727541118867978581241571403141591347634087822585510030300544565350013086245347877938460997012134483263246170075035538366655471678829489186272555186462719400058556898457840746727261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbo.uralsibbank.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029beea7507bcdebc6cf4f8826bd02d1c9722d7d328d23801b5af57e2fedd142c3265e746a97acdd22e68e6b16f309245caa3d7bdaaae45083732ee2d22b06e265dded309aefc66ef80a3fbe23f4f8b6b303bede30cdd843fb8d786b8cb6ba639ad421f719a8d38a9be6365d67f656beea9f15a41546f358f3dda4de2300eec47e7679184c6b7a6d6d8fb7e5286ff51c77063c1d9b8fc1a87fa39c7454ce3924745ea357fbe1ca589415d5e32bcd36057a9b1cd18b7d0775ccea3db980da0b0d57ccf6e91d571917597c9194a8e8318f7981bc8dc74edc15420aa6b693039644e63241c0eba8686b2a2c1b6dc86ce3cbbf97dbd0b9b6551feb28fee4602fda5b1