sso-j.vhv.de

- VHV Vereinigte Hannoversche Versicherung a.G. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 08:9b:50:d5:4c:27:8b:5c:ab:9d:e1:5a:4c:7e:61:f3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VHV Vereinigte Hannoversche Versicherung a.G.

Organization: VHV Vereinigte Hannoversche Versicherung a.G.
Organization unit: VHV Gruppe
State / Province: Niedersachsen
Locality: Hannover
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:9b:50:d5:4c:27:8b:5c:ab:9d:e1:5a:4c:7e:61:f3
Serial Number (int): 11440269471287799909385563970872435187
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:33:f7:48:65:2d:d8:f7:49:bf:60:44:3c:88:5b:69:71:7a:72:34
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 1a:97:d7:e5:6b:e5:85:7f:80:d6:84:83:44:1c:76:d0:c7:81:d6:f2
Fingerprint (sha256): 01:70:21:4b:f7:85:f9:cb:6c:2d:16:72:2f:b0:71:64:2c:48:7a:9c:17:54:b4:72:7b:07:08:81:a6:41:95:23

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate sso-j.vhv.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso-j.vhv.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso-j.vhv.de

Other certificates including the domain name vhv.de

(limited to 100 certificates)
vdi-portal.vhv.de
sts-s.vhv.de
sso-j.vhv.de
sharefile.vhv.de
dssmdm.vhv.de
buergschaftsportal-prod.vhv.de
maxnet-test.vhv.de
storefront-test.vhv.de
kundenportal-j.vhv.de
maxnet-n.vhv.de
vermittlerws.vhv.de
buergschaftsportal-prod.vhv.de
segmdm.vhv.de
uploadws-test.vhv.de
tarifrechner-s.vhv.de
moir-core.vhv.de
kreditportal-test.vhv.de
maxnet.vhv.de
sso-s.vhv.de
www.buergschaftsportal-test.vhv.de
www.buergschaftsportal.vhv.de
bildertool.vhv.de
login.vhv.de
www.buergschaftsportal.vhv.de
lebenrechnerweb-t.vhv.de
unwetter-test.vhv.de
photovoltaik.vhv.de
vermittler.vhv.de
login.vhv.de
vermittler-test.vhv.de
bildertool.vhv.de
gastportal.vhv.de
jvpms.vhv.de
externepartnerws.vhv.de
sysint.auskunftsersuchen.vhv.de
jvpms.vhv.de
www.vhv.de
kreditportal-test.vhv.de
vermittlerws-h.vhv.de
sts.vhv.de
mapo-test.vhv.de
sts-h.vhv.de
tarifrechner-cyber-e.vhv.de
photovoltaik.vhv.de
trsmdm.vhv.de
maxnet-test.vhv.de
photovoltaik.vhv.de
photovoltaik.vhv.de
vpn.vhv.de
photovoltaik.vhv.de
maxnet-s.vhv.de
photovoltaik.vhv.de
messenger.vhv.de
test.auskunftsersuchen.vhv.de
kundenportal.vhv.de
kreditportal.vhv.de
sts.vhv.de
maxnet.vhv.de
sso-b.vhv.de
lebenrechnerweb.vhv.de
uploadws.vhv.de
sdc.vhv.de
externepartnerws.vhv.de
e2e.vhv.de
kreditportal.vhv.de
www.vhv.de
sdc.vhv.de
b2b.vhv.de
mobiledevices.vhv.de
unwetter.vhv.de
www.buergschaftsportal.vhv.de
trsmdm.vhv.de
auskunftsersuchen.vhv.de
uploadws-test.vhv.de
tarifrechner.vhv.de
webvpn.vhv.de
sts-s.vhv.de
maxnet.vhv.de
unwetter-test.vhv.de
tarifrechner.vhv.de
auskunftsersuchen.vhv.de
photovoltaik.vhv.de
bildertool.vhv.de
gast-portal.ads.vhv.de
externepartnerws-test.vhv.de
b2b.vhv.de
www.vhv.de
tarifrechner-s.vhv.de
www.vhv.de
www.buergschaftsportal-test.vhv.de
b2b.vhv.de
jvpms.vhv.de
www.vhv.de
tarifrechner-t.vhv.de
tarifrechner-cyber.vhv.de
www.vhv.de
tarifrechner-hhg-t.vhv.de
sts-j.vhv.de
tarifrechner-h.vhv.de
kreditportal.vhv.de

Certificate

The complete raw certificate details for sso-j.vhv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tfuFoV5oLuFFy8YJCtq
xzbxPza516Nm3O5u/kATtMFX/guSzunK5vebx6DEacVAWVFTGq18pIca0seAAK5T
8vhU5r3jiJNPk1x2n+3HWwaKzC76K0E4YdEjhAv2yH9g2ujlbCsHO647+K6OnJHG
6X54rn4WOB07RpoobvEA6xVlUg0hRdI4BOexvgQDh7d47nELmE3gf7JgYREPE3zm
xe/wCgMJS6ubEdWIBQ8Yp52jyPXVgwGaOaXcxTdsAMLxF9VdGQwwu2pIYR/PgCA3
JvAXZ5hXXl/4ichwRG1Up2IjQPHQ0XOhcImLUM45cm7RwrJUmkK35FvI7CATIdNP
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11440269471287799909385563970872435187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV Vereinigte Hannoversche Versicherung a.G.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV Gruppe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso-j.vhv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27626429549489569093083200106309297076128797594451746337493081659564034856091961108415497023483166760630787681755323911936664987832734325342661148351609444710109210575911885509172436360127892488189313682076526117095002290100253756176428580147487639889477744719411374957651808966751725222200120505751314487736783017834826579039770951283518378454913025465561192467515837736000841210911049857934544102417711039756640017746145800191529720450199231727514443543968216902599577720477206484749706031282424842942151382437543188808725667419814525619793465642641898357829105198225875760801548859661150399119441568410584155901769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f333f748652dd8f749bf60443c885b69717a7234
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-j.vhv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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