www.qc.research.unicredit.eu

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 33:d7:0b:2d:00:02:00:00:09:a4 was issued on by UniCredit S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: XL78458
State / Province: Bayern
Locality: Muenchen
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 33:d7:0b:2d:00:02:00:00:09:a4
Serial Number (int): 244807545902116418619812
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: ce:ec:fe:4c:d3:b9:fd:a3:bb:80:dc:3d:9e:41:4c:ac:77:2d:ae:5a
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 58:aa:15:1d:e2:be:ac:5f:2f:40:c9:c3:a0:33:b4:a9:5d:0e:96:69
Fingerprint (sha256): 01:72:63:c2:36:03:5b:3b:7d:5e:b1:7e:e6:9d:f1:78:dc:26:26:8d:1d:92:95:06:76:81:ff:17:89:b1:00:84

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

OCSP Server: http://ocsp.unicredit.eu/ocsp
CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate www.qc.research.unicredit.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.qc.research.unicredit.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.qc.research.unicreditgroup.eu
www.qc.research.unicredit.eu

Other certificates including the domain name unicredit.eu

(limited to 100 certificates)
uagqa.unicredit.eu
payfits.unicredit.eu
globaltrade.it.hypovereinsbank.de
ucremanutenzione.unicredit.eu
mx13.unicredit.eu
changehub.unicredit.eu
www.qc.research.unicredit.eu
mx19.unicredit.eu
resetvc.unicredit.eu
san-005.ceros.com
seguc.unicredit.eu
mx05.unicredit.eu
ebanking.it-v.unicreditgroup.de
authorization.internal.api.unicredit.eu
convene.unicredit.eu
nra.unicredit.eu
mobileqa5.unicredit.eu
ccnp-de.unicredit.eu
jobs.unicredit.eu
mx04.unicredit.eu
vidm.unicredit.eu
*.extranet.unicredit.eu
ensqa.unicredit.eu
resetmb.unicredit.eu
*.extranet.unicredit.eu
esg-survey-eu-hvb.unicredit.eu
*.rasqa.unicredit.eu
mobira.unicredit.eu
authorization.api.unicredit.eu
ebanking.qc.unicreditgroup.de
mobileqa1.unicredit.eu
qnra.unicredit.eu
ilibrary.unicredit.eu
mx17.unicredit.eu
ra.internal.unicredit.eu
mx07.unicredit.eu
convene.unicredit.eu
mdm.unicredit.eu
api.payfx.unicredit.eu
vrrab.unicredit.eu
san-005.ceros.com
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
www.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
mobileqa3.unicredit.eu
ial.unicredit.it
segdev.unicredit.eu
ensqa.unicredit.eu
sipedge.unicreditgroup.eu
globaltrade.it.hypovereinsbank.de
mobileqa5.unicredit.eu
be-part-of-it.unicredit.eu
mx07.unicredit.eu
www.unicreditgroup.eu
san-005.ceros.com
authorization.openbanking.unicredit.eu
mobileqa3.unicredit.eu
mx04.unicredit.eu
sso.unicredit.eu
vrtrab.internal.unicredit.eu
ideasharing.unicredit.eu
mdmqa.unicredit.eu
uspg.unicredit.eu
nra.unicredit.eu
vidmqa.unicredit.eu
mx05.unicredit.eu
www.qc.research.unicreditgroup.eu
UCRECensimentoQA.unicredit.eu
processihrpe2.unicredit.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
authorization.api.unicredit.eu
tls10.unicredit.eu
*.extranet.unicredit.eu
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
san-005.ceros.com
developer.unicredit.eu
payfits.unicredit.eu
ens.unicredit.eu
UCREManutenzioneQA.unicredit.eu
feedback.unicredit.eu
globaltrade.it-v.unicredit.eu
hrprostaffm.unicredit.eu
ebanking.it.unicreditgroup.de
mobileAT.unicredit.eu
uspg.unicredit.eu
segat.unicredit.eu
san-005.ceros.com
mx17.unicredit.eu
sftpfgi.unicredit.eu
uagqa.unicredit.eu
lp-00.buddybankmessaging.unicredit.eu
segatqa.unicredit.eu
uctradefinancegate-1.unicredit.eu
segatqa.unicredit.eu
resetvb.unicredit.eu
a-apigw.omn.dev.azure.unicredit.eu
corporateportal.unicreditgroup.eu

Certificate

The complete raw certificate details for www.qc.research.unicredit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9llXXDbQaswYz5ROgm9
t1JgJoUcigx7EnzmdN1YG3kBo9nbBboOJjCnflIhk1eIs7EQIlCNkS08LllJ8cWk
HNLKsIS/Y14GZ0d8pev+P+5rdHnbnHYJb+4nvCcMzP+BczQUGL6a9HtCs5BXvg5h
6OLOPqsmY+EisO9dyZrfbvj6Y080WGJMBJXP8bnQtibeEgfjtKEc/oeISh68g2lu
GDTt0VEj+6Roex19n/ue0opD42/oMEmcA7Q6SBOLhXlXHe5ivEbYn4uUzEyvSos4
lVHJrimuA4ruvByWo/MugB3i5V7gDMhaUOPUEM6gwB1QSO+Vmhda1puC+RozI5ry
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244807545902116418619812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-11 08:00:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 08:00:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XL78458'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.qc.research.unicredit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20684045651357117633363144298037532854686059501010670894775444279495671617031005413408550974812126088421596938179936082639946218583561906689085895305898565580503573032678893927420009799105557743042349083579936310702101645639071932764201258842707797994225950389571880143268048424074124969992081855454420775649458408653420823672083171802596463937572400327734717799435134912454864935854453494817877912863648465125920753258303144170148260169421059480969907087481358528327368872473745090476856685437699714864304753040202827952567922216236752372534548884670839351511571466420251452950115177136074447372224196077446122631759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qc.research.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qc.research.unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ceecfe4cd3b9fda3bb80dc3d9e414cac772dae5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.unicredit.eu/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052f89d7badec4bedabb7aec8bbfc5739d020042890f45df5d0c4d9e0641f926fd1f07ec1e65f776f4323229d4cd6598be8c43a2feeb457d37b5eeea8ecc9a18bb223073cfe7e47a9c64a2af7345ae301cf09416564bfccd31c04ecb73320546bf17859319bcd4c09aabc3654cfe61cea17f9a5291177bfbeb50032b4271d644010162c0318b84f97396ebfc96299b2f46b7cb13b378e6f09737c03b419281218b0a7cb0c1f643ce789ebbc79a2719dd39bc8e646b5d20c8bd8358a0d69ca83a1909bc3982a9b89f10a65d6d8289cc242f9b366cba9c0632cecebc70a4097dad5a4ee51b069e84dc983e621d68b2dd46b6d45a1ee6982b09fc2f7b022c51f49c7