kommone.dvdv.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 49:9f:41:97:37:02:04:14:d2:42:42:70:a3:07:16:fb was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Governikus GmbH & Co. KG

Company registration number: CSM040954460
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 49:9f:41:97:37:02:04:14:d2:42:42:70:a3:07:16:fb
Serial Number (int): 97860549229906785992771563652232189691
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fd:01:8c:2c:3d:73:0b:fb:5c:2b:61:6a:58:85:ce:ee:a0:b6:82:32
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 52:98:ad:51:0e:79:70:f2:1c:4d:57:16:19:63:c9:cb:0d:81:cb:e0
Fingerprint (sha256): 28:ba:44:ca:f1:f5:fe:6b:33:ae:77:1f:33:df:d8:1e:5f:d9:e0:58:11:5b:90:e8:11:94:13:fc:66:a3:f3:41

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate kommone.dvdv.governikus.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kommone.dvdv.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kommone.dvdv.governikus.de
www.kommone.dvdv.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
pgp.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
localhost.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
www.anbieter-ausweisapp2.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for kommone.dvdv.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97860549229906785992771563652232189691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 13:38:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 13:38:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040954460'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kommone.dvdv.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726589281165833643874198739889316696899627174115813167676667173850201260058453943794889155809639338171019274116294605297045408599445780910364027550058914531200097790981353207210288233192886558365044954457342857257322064074643741819950837712946316629770447944094393279755353466594498328209512671926848300404026180970302779429248042973534261498553741707894831005748808285232744435782752177695907138434263133462395310004851268718111932912482319733389961984030698858205513504752559400937792680621590144489490375705102544121157508173302697910379606041097198839827502541197574906188443890093965484946408069490238447547099842907567526056672672832553704147682984282706406872611006111143591993834488101070859141438996197182049518771274746175194696533122054573001476731947238338164230024341717485568280436604993224394385552848344093933569753612649334985013585338430623454412011707950018864967121634130664230012439567526200018896843777121942214367100327406920680133544869061057247093158869779904841237725204738089969145493224196496078138101556493915974019773747199966257516964681732109199594740661920585741891370563489576047250298471430402823224259710866162816109704678065676311847470897318608935748018367811519192059680705995321334363211006029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kommone.dvdv.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kommone.dvdv.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd018c2c3d730bfb5c2b616a5885ceeea0b68232
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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