*.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 62:03:43:a4:3e:af:3d:af:a1:d5:98:3c:71:63:b7:7c was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Company registration number: CSM036999703
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 62:03:43:a4:3e:af:3d:af:a1:d5:98:3c:71:63:b7:7c
Serial Number (int): 130281292411759380960281469713058609020
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:30:5c:6b:59:34:b6:3a:a6:20:36:f9:04:2b:93:c1:82:86:61:e5
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 97:d3:87:dc:d8:2e:05:1d:ac:02:27:a4:0d:fc:0c:89:ee:fd:39:d6
Fingerprint (sha256): 59:14:b7:3a:81:31:15:dd:81:71:c6:a6:8e:41:af:60:32:1a:c6:66:44:3e:c1:9a:7e:ef:2f:43:ea:f1:b5:5e

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate *.governikus.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.governikus.de
*.governikus.de
governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for *.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130281292411759380960281469713058609020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 09:15:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 09:15:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM036999703'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851373515267492399285274641820954920501159925653293773009929974910865585633934899780459080708082215962748657031758994553584163576369764692822914622094910856432366370129987527008834105393734610558092822662204171109385397723314018599353093467279519394116091463433385104821910342218143330985061153034256598584086881515393827390849667238865702154769352775479223930218609471979148191865589091651145770531190156655429072002366104600018378219390774473223523472023611579181721550438729387212963142968512871203527071298663010660953991560675669720067260281697486097405073115416744501305771169400628855979770440719278117882673725702427452759479445106677772037950698732442749440617843905154947866261949024198465788283025849648575023003090109517490062106410972002386952884272808345856047865043120926791295102287455685284701659138472005339580942474489363113556166409379753227029983369593636132376786454620241076101166451933027901226184023124081289291834461046575444465496593796314977163691497075044944017027262306527539914251741497105229527970847364183057585841395423775734300455359263478069531517588111021047964990011909299615835038342776575706505953237915549779889180728954955778155737464183988423161345139516471020624958105946554930597215826159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a305c6b5934b63aa62036f9042b93c1828661e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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