www.anbieter-ausweisapp2.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 7f:da:8f:0d:3d:a2:b2:95:52:51:4f:65:f1:83:a3:99 was issued on by D-Trust GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Company registration number: CSM035349804
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:da:8f:0d:3d:a2:b2:95:52:51:4f:65:f1:83:a3:99
Serial Number (int): 169946777613459618073720204409950151577
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 45:91:18:66:c5:ae:b8:31:fd:1c:af:4f:53:7c:c7:61:4e:6a:c0:95
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 15:de:be:3b:5b:d5:11:5d:5c:a9:37:5e:52:fb:f7:99:d5:65:df:cb
Fingerprint (sha256): a0:7a:80:65:00:83:37:66:ad:cf:1c:28:7c:e9:11:b7:1f:ac:99:0b:f8:47:25:de:27:a6:6b:3e:74:5c:36:52

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate www.anbieter-ausweisapp2.governikus.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.anbieter-ausweisapp2.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.anbieter-ausweisapp2.governikus.de
anbieter-ausweisapp2.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for www.anbieter-ausweisapp2.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169946777613459618073720204409950151577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 13:06:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 13:06:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM035349804'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830678484280886960841944398716854652543527593008011958902880981085160073117615692740216420553964520122705132370029719757409165401494030193900331364976371980009386409254475478095019417780246144676056804026765298841390388716062054083320699651699479184060380586782548955445568306792177999672011211491962780451821461951151382728322146125172920341299824394917951617300811676581586958191926235045812008605295540142453396414154350569601132160673638814462686901586030076642166916196480262848218927406518860923312810346586519446323541646177390978234594421391418560466559623776726772819976592993550906636068700332995969726725047820599587466441061814527270671175149711186158705494164471581019989896506621738508421758468867755889994450515126636553568608986787948658836869989321342119281472797208980748259463707300837173655700133575080620895741888487221834382268152316001124887904941268684525327959942301116924556024483066875602786295816127881836529481964484430036411836543162165749724070962594956823849510855871117642855536941872730704500325795610931599236605304396113627777334519940195316506959596628333356596658531002780009083394870028944792908872859792183093382094051914535684825644304548806428856565345670105171247203655394376713748370988183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (723 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbieter-ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbieter-ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45911866c5aeb831fd1caf4f537cc7614e6ac095
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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