uspg.unicredit.eu

- Unicredit S.p.A. -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 50:34:97:78:00:00:00:00:06:1f was issued on by UniCredit S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Unicredit S.p.A.

Organization: Unicredit S.p.A.
Organization unit: Applicativi
State / Province: Milano
Locality: Milano
Country: IT

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 50:34:97:78:00:00:00:00:06:1f
Serial Number (int): 378759463795101446178335
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: b5:bf:4e:ea:fa:50:18:63:4b:48:03:a5:7c:f2:d0:12:8b:8a:de:7e
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 43:22:db:a3:c5:19:f1:da:22:61:4a:da:f5:db:a6:df:65:02:29:2e
Fingerprint (sha256): 0c:ec:34:12:79:d8:5b:ea:f1:d7:c1:39:0d:3c:aa:5e:77:74:4c:af:75:3c:9d:d1:8e:01:f7:64:f4:52:8b:d9

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate uspg.unicredit.eu

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uspg.unicredit.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name unicredit.eu

(limited to 100 certificates)
payfits.unicredit.eu
globaltrade.it.hypovereinsbank.de
ucremanutenzione.unicredit.eu
mx13.unicredit.eu
www.qc.research.unicredit.eu
mx19.unicredit.eu
resetvc.unicredit.eu
san-005.ceros.com
seguc.unicredit.eu
mx05.unicredit.eu
ebanking.it-v.unicreditgroup.de
authorization.internal.api.unicredit.eu
convene.unicredit.eu
nra.unicredit.eu
mobileqa5.unicredit.eu
ccnp-de.unicredit.eu
jobs.unicredit.eu
mx04.unicredit.eu
vidm.unicredit.eu
*.extranet.unicredit.eu
ensqa.unicredit.eu
resetmb.unicredit.eu
*.extranet.unicredit.eu
*.rasqa.unicredit.eu
mobira.unicredit.eu
authorization.api.unicredit.eu
ebanking.qc.unicreditgroup.de
mobileqa1.unicredit.eu
qnra.unicredit.eu
ilibrary.unicredit.eu
mx17.unicredit.eu
ra.internal.unicredit.eu
mx07.unicredit.eu
convene.unicredit.eu
mdm.unicredit.eu
api.payfx.unicredit.eu
san-005.ceros.com
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
www.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
mobileqa3.unicredit.eu
segdev.unicredit.eu
ensqa.unicredit.eu
sipedge.unicreditgroup.eu
globaltrade.it.hypovereinsbank.de
mobileqa5.unicredit.eu
be-part-of-it.unicredit.eu
mx07.unicredit.eu
www.unicreditgroup.eu
san-005.ceros.com
authorization.openbanking.unicredit.eu
mobileqa3.unicredit.eu
mx04.unicredit.eu
sso.unicredit.eu
mdmqa.unicredit.eu
uspg.unicredit.eu
nra.unicredit.eu
mx05.unicredit.eu
www.qc.research.unicreditgroup.eu
UCRECensimentoQA.unicredit.eu
processihrpe2.unicredit.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
authorization.api.unicredit.eu
tls10.unicredit.eu
*.extranet.unicredit.eu
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
san-005.ceros.com
developer.unicredit.eu
ens.unicredit.eu
UCREManutenzioneQA.unicredit.eu
feedback.unicredit.eu
globaltrade.it-v.unicredit.eu
hrprostaffm.unicredit.eu
ebanking.it.unicreditgroup.de
mobileAT.unicredit.eu
uspg.unicredit.eu
segat.unicredit.eu
san-005.ceros.com
mx17.unicredit.eu
sftpfgi.unicredit.eu
uagqa.unicredit.eu
lp-00.buddybankmessaging.unicredit.eu
segatqa.unicredit.eu
uctradefinancegate-1.unicredit.eu
segatqa.unicredit.eu
resetvb.unicredit.eu
a-apigw.omn.dev.azure.unicredit.eu
corporateportal.unicreditgroup.eu
san-005.ceros.com
esg-survey-eu-hvb.unicredit.eu
sipedge.unicreditgroup.eu
*.it.f4p.uat.g4c.unicredit.eu
vrra.unicredit.eu
iep-wifi-mi.unicredit.eu
compensationpolicy.unicredit.eu
www.research.unicredit.eu
www.unicreditgroup.eu

Certificate

The complete raw certificate details for uspg.unicredit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bm31NA4YhuualfxWgVX
P0bGM/M+OpRs1xmgtwcDrFFvAgxcQgsZ4rg5LwN40wZvNHMvQF4+cZEAKu4FGTkC
cdCRw6rc4SgkWv2dglR1Tfh0nSk+1Hwb/MnALDGdAtIPaxRyoLbGU1292/wCXcd8
y+EO2oh7gBLqzhsi7NDYIutmNvIa1s7MA2nWTOwDPuWQzrNRRQv5ILQURPi06RW2
BTofi5v227JC8cjnp71+nP//C6CBGSRheUNwHiHdFtgu7tOSvoj51/eRlLY4ttCU
w9mBktTY3cFmT+3zFVyjjRE5VjX9DGb7A8beDHZiTX4cCmqJylcVi7KIycS9Dg2n
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378759463795101446178335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-09 15:11:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-09 15:11:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unicredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Applicativi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uspg.unicredit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27990246401453736973652528158041708227010017424702180182347233290570783627879488272154171506444337518447534046667688555235607206068320074068536095838052874959323808163935336628208094670571366922590615653226461910414550599912197209520754618860802802562438677056966140892512629118270090798498575933713088861636704890956210878448400851701853161233374646238390260400764727248399371305887211320868019488897047244100601183116752496059818115687745548712166863095916330366184300759869801894951761071167347174106737205003689213014583193797243589694003442993006747947623015902827957165983198818213837400972341944920277716412183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5bf4eeafa5018634b4803a57cf2d0128b8ade7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00152a2a3e81215717515dd61c9bc7de72e7549d6debb217f1ec64bdbadeefdd23f054430c56f6dea1dd013e3bf792da4c296dcd9227cf5116c9641916fafecaae437aaf084be177b43261ce0b47604537d5125cdf89042479503f8fc6e13b1e201f2a6f4d1f3e8d0f5450b5b88688703fee81bf0c40a2691aaa30a11cc89794e838f215e2e2455727be12248149ca663167bf744421ce6ef62528cc129802d1e61575b987f0cc8dc419e90054d3149a3e23f5517b056f8f6e1d372064647062740426c7e4764a7754bbdfaa8f14a70e70a991f41da126c0e0def71f6cb8ebb2c2f32c919f6688a564963cca64e1f9cb7722498bc604f3fdcb0448618d508ec84d