www.qc.research.unicreditgroup.eu

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 5d:44:db:b8:00:00:00:00:04:f6 was issued on by UniCredit S.p.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: US92068
State / Province: Bayern
Locality: Muenchen
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:44:db:b8:00:00:00:00:04:f6
Serial Number (int): 440450293908379275363574
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: 5b:69:cc:ca:2a:57:6b:a6:20:70:e5:ad:db:1d:06:8d:b8:3c:f4:aa
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): fe:42:7c:2b:bd:de:5e:9f:e1:51:c7:cc:8c:3f:42:8f:4f:3f:07:5d
Fingerprint (sha256): 0e:40:09:d4:bb:ce:82:b4:3d:37:16:49:29:f9:7b:af:9a:29:94:60:54:87:68:3e:b6:23:55:4a:d3:e8:1c:04

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate www.qc.research.unicreditgroup.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.qc.research.unicreditgroup.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.qc.research.unicreditgroup.eu
www.qc.research.unicredit.eu

Other certificates including the domain name unicreditgroup.eu

(limited to 100 certificates)
cpe-ro0.unicreditgroup.eu
vswunicastpool.unicreditgroup.eu
mobsk.mbc.sit.unicreditgroup.eu
webconference.unicreditgroup.eu
mail.at.unicreditgroup.eu
uctrader.unicreditgroup.eu
www.gss.unicreditgroup.eu
edp.unicreditgroup.eu
api.digital-portal.hv.unicreditgroup.eu
capgwmil.unicreditgroup.eu
www.qc.research.unicredit.eu
mx1.rs.unicreditgroup.eu
esa.unicreditgroup.eu
credilogic.qc.unicreditgroup.eu
cpe.unicreditgroup.eu
v-accounting-qa.unicreditgroup.eu
intranetportal.unicreditgroup.eu
sapuetssl.internal.unicreditgroup.eu
mobapp.hot.unicreditgroup.eu
ce.services.unicreditgroup.eu
ebanking.it-v.unicreditgroup.de
www.assetmanagermobile.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
streaming.uctrader.unicreditgroup.eu
cpe-de0.unicreditgroup.eu
cpe-si0.unicreditgroup.eu
mobgui.mbc.intranet.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
gys-apiadmin.unicreditgroup.eu
cpe-hu0.qc.unicreditgroup.eu
webinars.webtvucg.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
qgb.uat.unicreditgroup.eu
cpe-ro0.qc.unicreditgroup.eu
cpe-hu0.qc.unicreditgroup.eu
mx01.ba.unicreditgroup.eu
esa.unicreditgroup.eu
cpe-gb0.qc.unicreditgroup.eu
usvawqwesc1.sd01.unicreditgroup.eu
media.investimenti.unicredit.it
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
cpe-gb0.qc.unicreditgroup.eu
services.unicreditgroup.eu
mx02.bg.unicreditgroup.eu
scrivaniafinanziamenti.unicreditgroup.eu
capgwmil.unicreditgroup.eu
qtk.it.appl.unicreditgroup.eu
www.unicreditgroup.eu
sts.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
bafntplpe.internal.unicreditgroup.eu
sipedge.unicreditgroup.eu
cpe-ro0.unicreditgroup.eu
gms.unicreditgroup.eu
efsg3.ifp.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
*.gw.unicreditgroup.eu
usvawqwesc1.sd01.unicreditgroup.eu
www.unicreditgroup.eu
*.gw.unicreditgroup.eu
www.research.unicreditgroup.eu
mx2.ba.unicreditgroup.eu
gms.unicreditgroup.eu
esa.unicreditgroup.eu
mobapp.sit.unicreditgroup.eu
*.gw.unicreditgroup.eu
mobgui-cloud.mbc.intranet.unicreditgroup.eu
ucs.api.unicreditgroup.eu
recruiting.qc.unicreditgroup.eu
cpe-gb1.unicreditgroup.eu
ugs-qa.api.unicreditgroup.eu
www.qc.research.unicreditgroup.eu
mx1.rs.unicreditgroup.eu
v-accounting-qa.unicreditgroup.eu
mobhl.mbc.sit.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
mobea.mbc.unicreditgroup.eu
mobsi.mbc.sit.unicreditgroup.eu
sign.test.intranet.unicreditgroup.eu
devworkplace.external.unicreditgroup.eu
UCTrader Lon Prod
ebanking.it.unicreditgroup.de
mobcz.mbc.sit.unicreditgroup.eu
cpe-at0.qc.unicreditgroup.eu
mx06.at.unicreditgroup.eu
*.tagetikcpm-internet.unicreditgroup.eu
streaming2.uctrader.unicreditgroup.eu
ebanking.it.unicreditgroup.de
cpe-xx0.qc.unicreditgroup.eu
cpe-de0.qc.unicreditgroup.eu
v-accounting-dev.unicreditgroup.eu
www.maksy.unicreditgroup.eu
mx02.ba.unicreditgroup.eu
intranetportal-images.unicreditgroup.eu
corporateportal.unicreditgroup.eu
directmail.unicreditgroup.eu

Certificate

The complete raw certificate details for www.qc.research.unicreditgroup.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMIv8fzJiNEaXGGBUlnk
4TB8KZdHANI0ZR1xdHVH9IIOi6ezOC3aQBlxiZMzW0J1bO8Rsw0byMYprDJKtSWD
JUVW7weSzcJ+3tcejwQVWsRrgnejZL19Qwh4KdG0jfcEK6gNBGo8HF9WrXJ512f/
Y51CO12fVZzux4Eiv+pelMsOvO1F3DhXo2Ivahik14jJlQ9PWl06tCfCxtF3VKJx
JqU30AOGXaHhQp67gGF8XZSx6keLXAnG6enVtvpluwnPVr0RmuMLBfaUB6u4IANj
0cPJmpmA1esJxd9RNW3qNWTHKpo1JAzRQdl+kP1Ev4YWZKTEWOBKJcYpTwtGdaGQ
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 440450293908379275363574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-27 07:52:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-27 07:52:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US92068'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.qc.research.unicreditgroup.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25848371532818189965772842553401795798519618919893191668835506202620724111830928888603852666408066398406631571676698075919752920059255560359075924131652451818952932046279902870170246703444212353995027021627256791690911262342018577228125135872475102006749842752491387040478744036859894575777795192565485879963839852216011873823547828463222622216354715131659998474055672172564676025675522081583830852053063124955941771179247177068196954286225685100018739291994237790966803514167185573846520835142339160490411840113274441425187505213574997118277652256914360694476471740621453330973924112146561334363326134871815706742837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qc.research.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qc.research.unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b69ccca2a576ba62070e5addb1d068db83cf4aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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