*.I7609.PB-FCSI.RZ.BANKENIT.DE

- FIDUCIA & GAD IT AG -

Issued by VR IDENT SSL CA 2016

About this certificate

This digital certificate with serial number 0b:31:9a:ab:d8:ee:22:2f:7d:b9:ef:de was issued on by FIDUCIA & GAD IT AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

FIDUCIA & GAD IT AG

Organization: FIDUCIA & GAD IT AG
Organization unit: VR-IDENT
State / Province: HESSEN
Locality: FRANKFURT AM MAIN
Country: DE

FIDUCIA & GAD IT AG

Organization: FIDUCIA & GAD IT AG
Organization unit: VR IDENT
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:31:9a:ab:d8:ee:22:2f:7d:b9:ef:de
Serial Number (int): 3464302887658980059247144926
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 94:75:c2:34:2f:2c:ce:38:53:3c:58:40:d2:75:ae:4f:8b:ce:64:d6
AuthorityKeyId: 50:52:4f:44:2e:47:54:4e:2e:45:58:53:53:4c:43:41:2e:53:49:47:47:45:4e:52:53:2e:30:30:30:30:32:37:30:30

Fingerprint (sha1): 43:24:7e:65:99:08:48:99:76:ab:dc:72:b0:02:26:af:0b:0e:9e:95
Fingerprint (sha256): 04:41:f5:15:0d:ee:a9:96:88:6a:a7:dd:e9:23:e4:ec:f2:b4:00:c2:aa:ea:6c:9f:b0:f1:a6:6f:05:dd:00:ff


Revocation information

OCSP Server: http://ocsp.vr-ident.de/gtnocsp/OCSPResponder/FIDUCIA%20%26%20GAD%20IT%20AG/VR%20IDENT%20SSL%20CA%202016
CRL Distribution Point: http://www.vr-ident.de/gtncrl/CRLResponder/FIDUCIA%20%26%20GAD%20IT%20AG/VR%20IDENT%20SSL%20CA%202016

Check the revocation status for certificate *.I7609.PB-FCSI.RZ.BANKENIT.DE

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.I7609.PB-FCSI.RZ.BANKENIT.DE

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.I7609.PB-FCSI.RZ.BANKENIT.DE
*.I7609.PB.RZ.BANKENIT.DE

Other certificates including the domain name BANKENIT.DE

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.I7609.PB-FCSI.RZ.BANKENIT.DE in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4GWepaFpCvkQA8gbEu/
9qCgxik0qsig5MlGeG1k4cm8eWMIVBQRlBozKEnb6RTn51mmJRSeIZbjFuATGbXO
EYSXs4WJoGkKGME3xsv+k73MIQIvXHzQFT8ecQRVsSDeraHX90wcLmKoo72zuxPi
8Q9+MgVykHpjVgxhdoK5ex7qqgRndiRcGBQ2CEdu16L8ahdWsCdiJ7Y6O6/K50f0
4L7i8LKAXOVcCoZ9ox2VC1oKFi4IkcfWpNh2nBFFPuTX6SK5ebTCANvePfeL7i5l
hN+lSvH4pOa2j2XgEHhhpJjbQmw1L5xdWlNipFV4utTDpppl721tye2lD4VTxIiz
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3464302887658980059247144926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VR IDENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FIDUCIA & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VR IDENT SSL CA 2016'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 23:28:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 21:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HESSEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FRANKFURT AM MAIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FIDUCIA & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VR-IDENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.I7609.PB-FCSI.RZ.BANKENIT.DE'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21650652279007553312875976841237258920182240586863309104979066336581785624480519165134696109074737327205548539650517983718904666965446266070415063975798926446903918540312144511482032154695969921800291800116615071681299831326063904160800784551972435736855726393159819701507923989618522625130029247530360689356543753187959211738990486705057903125836477463550269706260796244285482571146980905872404551005468273811167461205523953600393720954492906534407307946199428820968723530412411297445584487826536072311517612732056294840311836604523204893241576986298088360878077188544107609870331077980422584370221115886686381323247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.vr-ident.de/gtnocsp/OCSPResponder/FIDUCIA%20%26%20GAD%20IT%20AG/VR%20IDENT%20SSL%20CA%202016'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.I7609.PB-FCSI.RZ.BANKENIT.DE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.I7609.PB.RZ.BANKENIT.DE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9475c2342f2cce38533c5840d275ae4f8bce64d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50524f442e47544e2e455853534c43412e53494747454e52532e3030303032373030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.17696.4.1.1.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.vr-ident.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.1600.0.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.vr-ident.de/gtncrl/CRLResponder/FIDUCIA%20%26%20GAD%20IT%20AG/VR%20IDENT%20SSL%20CA%202016'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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