pgp.governikus.de

- Governikus GmbH & Co. KG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 79:3a:3a:ae:41:d8:fb:21:0b:a8:9e:ac:e9:85:d8:77 was issued on by D-Trust GmbH.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Governikus GmbH & Co. KG

Company registration number: CSM035273158
Organization: Governikus GmbH & Co. KG
State / Province: Bremen
Locality: Bremen
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 79:3a:3a:ae:41:d8:fb:21:0b:a8:9e:ac:e9:85:d8:77
Serial Number (int): 161138930893605969441688793176443574391
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6f:39:5a:17:26:fa:82:e1:6f:be:95:69:84:d1:ec:e0:06:fb:7f:dd
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 87:d0:1a:ff:37:ad:01:ae:71:d2:80:33:a8:44:a2:11:5b:d5:3d:6c
Fingerprint (sha256): f1:ed:a9:79:82:f4:3d:6f:52:e8:81:0e:ad:f4:f2:9e:53:3b:a2:04:79:de:da:e8:25:08:dd:87:a9:eb:b5:ef

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt
Issuing Certificate URL: ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate pgp.governikus.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pgp.governikus.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pgp.governikus.de
governikus.com
www.governikus.com
anbieter.ausweisapp2.governikus.de
www.anbieter.ausweisapp2.governikus.de
jahrestagung.governikus.de
www.jahrestagung.governikus.de

Other certificates including the domain name governikus.de

(limited to 100 certificates)
pilot.id.governikus.de
*.governikus.de
autclient.governikus.de
www.governikus.de
www.jahrestagung.governikus.de
*.governikus.de
localhost.governikus.de
messe.governikus.de
pgp.governikus.de
kommone.dvdv.governikus.de
portal.governikus.de
messeapp.governikus.de
kommone.dvdv.governikus.de
www.governikus.de
pilot.id.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
repo.portal.governikus.de
*.governikus.de
pgp.governikus.de
cloud.governikus.de
www.anbieter-ausweisapp2.governikus.de
sirs.governikus.de
portal.governikus.de
www.anbieter-ausweisapp2.governikus.de
auth.governikus.de
www.anbieter-ausweisapp2.governikus.de
www.governikus.de
www.anbieter-ausweisapp.governikus.de
messe.governikus.de
*.governikus.de
portal.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de
pgp.governikus.de
www.anbieter-ausweisapp2.governikus.de

Certificate

The complete raw certificate details for pgp.governikus.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161138930893605969441688793176443574391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 13:11:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 13:11:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM035273158'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Governikus GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pgp.governikus.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819085816731781021004387622738086077674783917799493600658207157951263216522307052826354865264369742349820565093693961249490061661673004792360434163248312253328340001405583851509283323854805596062331913686870683603883030002149972862775509500740543120848479039364690450787422089709091997866205824507282313142489612327994414996506904067775557976198613588542487532027576390703266602450993266874431045070292415433363495279246481195633002003926826909575061469240191552261906260817758680496837757466754479282402851595641270193298181448239231954805890759266260798522038052945569394195692671882562908847578717711114739008036191131656945609691575644502927917462602576072494954235499143196890257319286484695547292724836445530928122607738361486159083444643425524120220941477970876052791837265304513882089829561285226284203703629701752215876041911254568032586506605916878139203848015054520592715817939541708988310847429799547501978995594932618435907860890050192687660352740696059024212469654152458280725982282954493734780612173848762354575267253593985870412701653016343091567859979227763623984629993278668214344305519497927612698382411931216284020960462894415922444772138177806977556527295108371227707315858891854025351829619033725797248158432477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.d-trust.net/CN=D-TRUST%20SSL%20Class%203%20CA%201%202009,O=D-Trust%20GmbH,C=DE?cACertificate?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (721 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgp.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governikus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governikus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbieter.ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anbieter.ausweisapp2.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahrestagung.governikus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jahrestagung.governikus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f395a1726fa82e16fbe956984d1ece006fb7fdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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