globaltrade.it.hypovereinsbank.de

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 35:2f:74:66:00:01:00:00:07:49 was issued on by UniCredit S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: US92068
State / Province: Bavaria
Locality: Munich
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 35:2f:74:66:00:01:00:00:07:49
Serial Number (int): 251160807954915864348489
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 84:80:f9:6d:06:4b:d8:a5:97:fd:04:7b:55:4f:3f:91:d0:a3:f9:a1
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 99:4a:6d:7e:78:11:ef:57:fe:e0:c7:d3:62:5a:ea:63:ca:10:7c:15
Fingerprint (sha256): 0a:1a:eb:c6:c2:e9:6d:c7:03:0c:07:97:f0:76:1d:88:32:6f:70:b8:10:04:35:3d:a0:11:90:39:f0:20:09:ba

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate globaltrade.it.hypovereinsbank.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globaltrade.it.hypovereinsbank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globaltrade.it.unicredit.eu
globaltrade.it.hypovereinsbank.de

Other certificates including the domain name hypovereinsbank.de

(limited to 100 certificates)
www.hypovereinsbank.de
pfp.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
produkte.hypovereinsbank.de
communications.qa.hypovereinsbank.de
hbci-01.hypovereinsbank.de
blog.hypovereinsbank.de
res-findata-uj-v3.unicredit.it
angebot.qa.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
webtraining-qsu.hypovereinsbank.de
banking4business.hypovereinsbank.de
www.hypovereinsbank.de
mobile.qa.hypovereinsbank.de
communications.qc.hypovereinsbank.de
ucforms.qa.hypovereinsbank.de
my.hypovereinsbank.de
about.hypovereinsbank.de
forms.hypovereinsbank.de
workingcapital.hypovereinsbank.de
virtuals.qc.hypovereinsbank.de
mcatalogue.hypovereinsbank.de
ial.unicredit.it
hbci-01.hypovereinsbank.de
globaltrade.it.hypovereinsbank.de
sucmetrics.hypovereinsbank.de
kampagne.hypovereinsbank.de
communications.qc.hypovereinsbank.de
hypovereinsbank.de
forms.hypovereinsbank.de
ddx.qc.hypovereinsbank.de
finanzkonzept.hypovereinsbank.de
contact.hypovereinsbank.de
MQ.GET.HVB.HV.GWXIGW00.MQEXTGWGET.HYPOVEREINSBANK.DE
www.hypovereinsbank.de
multiweb.it-v.hypovereinsbank.de
geschichte.hypovereinsbank.de
privatebanking-standorte.hypovereinsbank.de
il.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
communications.hypovereinsbank.de
akamai-san228.exacttarget.com
www.qc.hypovereinsbank.de
hypovereinsbank.de
press.qa.hypovereinsbank.de
immobilienfinanzierung.hypovereinsbank.de
kredit.qc.hypovereinsbank.de
tpas.application.hypovereinsbank.de
res-findata-hv-v2.hypovereinsbank.de
hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
hvbforms.qc.hypovereinsbank.de
geschaeftskonto.hypovereinsbank.de
ilwebdav.qa.hypovereinsbank.de
ucforms.hypovereinsbank.de
dossiers.hypovereinsbank.de
www.qc.hypovereinsbank.de
hypovereinsbank.de
click.news.hypovereinsbank.de
stats.hypovereinsbank.de
dossiers.hypovereinsbank.de
www-gimb.qc.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
antrag.hypovereinsbank.de
communications.hypovereinsbank.de
ratenkredit.hypovereinsbank.de
webtraining.hypovereinsbank.de
angebot.hypovereinsbank.de
hvbforms.hypovereinsbank.de
antrag.hypovereinsbank.de
upload.hypovereinsbank.de
uat.omnichannel.hypovereinsbank.de
euroweb-sin.application.hypovereinsbank.de
kredit4business.hypovereinsbank.de
geschichte.hypovereinsbank.de
hbci-01.hypovereinsbank.de
forms.hypovereinsbank.de
my.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
akamai-san228.exacttarget.com
virtual-reality.hypovereinsbank.de
kredit.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
tpasgw.application.hypovereinsbank.de
immobilien.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de
ucpages.qa.hypovereinsbank.de
www.hypovereinsbank.de
ebics-clearing-itu.hypovereinsbank.de
virtual-reality.hypovereinsbank.de
services.hypovereinsbank.de
geschichte.qa.hypovereinsbank.de
empfehlen.hypovereinsbank.de
pfp.hypovereinsbank.de
allianz.hypovereinsbank.de
antrag.qa.hypovereinsbank.de
ebics-clearing-qsu.hypovereinsbank.de
retailevents.hypovereinsbank.de
globaltrade.qc.hypovereinsbank.de

Certificate

The complete raw certificate details for globaltrade.it.hypovereinsbank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9YNq6QY80B07ss/yZ+Z
WmTDX1MGTqZP9uN+hVehHUTiMK09iBxQ9W8eLTXOohiAB/k3DNVyJwgz8Z+bGVNh
mMBqAb2/4XXDUEgr8Xslr/OWGlx/yi9X3PotnBClM3tAo7mCtBGoLtaaccziEKFO
FoJTHFKZMcd5lap12SnZzSsnIVfJl69BTfOvdJr4Z54NZ5UqOsLwKLxmpccSIYPK
jICGiplK3kyy6rAupdrtgMYG3qeFKlkZN5NtfmLNZcL9O4oD63Z51kyDfVRkG+cn
B68ioKW3l/UBEhu8/d5oAl1o4TT3PgUjQFnTHYCm96peJazmcmuV1VUXxFPHpxEE
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 251160807954915864348489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-26 10:35:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-25 10:35:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US92068'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globaltrade.it.hypovereinsbank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22197257034779246645065570112104496303755148644894432054898481103681302219336685731414893792490918421999163104883494031610375579183676781631109782000024078575400695616564069872852423648802103716896411370816223035901865752559037559662091275417934267489648882272444774768993787432361659245393137189268904184393607899893026101031156216343383111464232553781806343396871122273374258130259175553350237447843273221955625143005735659866233531494304959272685209467877575936928595179116464025487932369793222173006739089658542353072453187096617005791253571703418422533134336358050501780114682885881121226348102630845132680791227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltrade.it.unicredit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltrade.it.hypovereinsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8480f96d064bd8a597fd047b554f3f91d0a3f9a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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