giropay-admin.fiducia.de

- Fiducia IT AG -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 1f:d8:db:49:bd:e7:6c:ab:1f:27:37:d7:c8:78:5a:78 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Fiducia IT AG

Organization: Fiducia IT AG
Organization unit: IS25NE
State / Province: BadenWuerttemberg
Locality: Karlsruhe
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:d8:db:49:bd:e7:6c:ab:1f:27:37:d7:c8:78:5a:78
Serial Number (int): 42332051680907419977683503046087694968
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): cd:04:b0:63:8f:53:a4:3c:89:bb:4c:c2:f9:4f:68:55:0b:df:93:59
Fingerprint (sha256): 0e:ab:92:29:df:c5:e6:49:c0:10:46:8c:2a:13:73:dc:40:fa:fa:cb:05:31:a4:1d:cc:25:8b:c4:26:35:24:8b

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate giropay-admin.fiducia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giropay-admin.fiducia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giropay-admin.fiducia.de

Other certificates including the domain name fiducia.de

(limited to 100 certificates)
jprint31-z.brz.fiducia.de
webcenter-publish-01g.fiducia.de
finanzportal.fiducia.de
oapimgbrs024.brz.fiducia.de
fiducia-direkt.de
ZIS4.NOC.FIDUCIA.DE
webcenter-publish-01h.fiducia.de

vr-bankingapp-riat.web.fiducia.de
jprint48-riat-e.brz.fiducia.de
agreetouch.fiducia.de
SEUDB-DEV.RZ.BANKENIT.DE
pegasus.peras.fiducia.de
agreesb.fiducia.de
fints-test.atruvia.de
webdav-uit-a.fiducia.de
fidwdpa40.fid.sap.fiducia.de
giropay-admin.fiducia.de
genogoogle-riat.brz.fiducia.de
sonar-dev.rz.bankenit.de
ftgwp10.fiducia.de
pilot.vr-infoforum.fiducia.de
ebics.fiducia.de
webcenter-publish-01g.fiducia.de
OAPIMGBRS034.BRZ.FIDUCIA.DE
oatimgbrs016.brz.fiducia.de
webdav-uit.fiducia.de
*.E1.WEB.FIDUCIA.DE
geno-formular2.finanzportal.fiducia.de
vr-bankingapp-edu.web.fiducia.de
fus.rz.bankenit.de
vr-bankingapp-edu.web.fiducia.de
RAPIMGBRS034.BRZ.FIDUCIA.DE
webcenter-publish-01a.fiducia.de
cik7011.uit.sap.fiducia.de
giropay.fiducia.de
xmc-nac03.netz.fiducia.de
citrix-a.uit.fiducia.de
vr-bankingapp-messe.web.fiducia.de
www.vr-infoforum.fiducia.de
*.p20.brz.fiducia.de
geno-formular2.finanzportal.fiducia.de
sonargraphlic-dev.rz.bankenIT.de
SONARGRAPHLIC-QA.RZ.BANKENIT.DE
datenservice.fiducia.de
seu27.pka.bankenit.de
svn.fiducia.de
*.web.fiducia.de
identity.fiducia.de
jenkins.rz.bankenit.de
agreesb20-g.fiducia.de
webcenter-publish-01f.fiducia.de
bo-p-uit.fiducia.de
sonargraphlic-qa.rz.bankenIT.de
identity.fiducia.de
seulicences.rz.bankenit.de
oapimgbrs035.brz.fiducia.de
zis2.noc.fiducia.de
seudb.rz.bankenIt.de
xmc-gim.netz.fiducia.de
finanzportal-ms.fiducia.de
webcenter-publish-01h.fiducia.de
giropay-transx.fiducia.de
zvs-production.p20.brz.fiducia.de
rentenmanager-prod.vkb.fiducia.de
webcenter-publish-01e.fiducia.de
uitmgwug3.uit.sap.fiducia.de
giropay-admin.fiducia.de
citrix-a.uit.fiducia.de
webcenter-publish-01d.fiducia.de
vr-bankingapp-riat.web.fiducia.de
*.l1.web.fiducia.de
uit-sharepoint.fiducia.de
*.WEBCENTER-PV-PILOT-MS.BRZ.FIDUCIA.DE
servicedesk.sap.fiducia.de
cie7012.uit.sap.fiducia.de
webservices.fiducia.de
voting.fiducia.de
svn-qa.fiducia.de
webcenter-publish-01d.fiducia.de
webdav-uit.fiducia.de
webdav-uit-a.fiducia.de
jprint42-z.brz.fiducia.de
hbci11.fiducia.de
sts.enterprise.fiducia.de
ide.rz.bankenIT.de
hbci11.fiducia.de
mobile-access.fiducia.de
pegasus.peras.fiducia.de
*.l2.web.fiducia.de
dzbhcmhrt.dzb.sap.fiducia.de
ebics.fiducia.de
vr-bankingapp-last.web.fiducia.de
sanpki-gui.fiducia.de
dbawdpa01.dba.sap.fiducia.de
UIT-DIAMO-N-11.UIT.FIDUCIAGAD.DE
test-intmob.fiducia.de
jprint31-riat-e.brz.fiducia.de
webcenter-publish-02a.fiducia.de
fiderps38.fid.sap.fiducia.de

Certificate

The complete raw certificate details for giropay-admin.fiducia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j/3ZG1GBlrXNQmRYGIT
nZOXR0YFuRuhFT0PK9C1/Z4coKG3lhIL+ZhjCoq78eHLC3OzyDW1iEaZxWPp199s
uXRLImP5UbCX4j7hi5G/h9u4r2vuHTIaAt1pk0esxERoX87nJ19jnUjX0dGtj0UL
fwox+Clzc6OK71zrhZYZdLqZ8fqzx5gGo9CjkFng2xleXlj74zqrwM6tvy2DogXE
vRfF/QadYignM1Wfb2CFgDM2ki7uUDCD6i0VYeisALrANUs8A162ioBDdJJe45M2
6aOmdg+hrAN7McVGsuIhowp8R290emXuhUfruA5USagZyJ1DZA4RbxWfH34o28GL
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42332051680907419977683503046087694968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BadenWuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fiducia IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IS25NE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'giropay-admin.fiducia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26541587038571537682193589465270419857596608055372560728835252658505147761483313712513819493113099535189745827017094766793888078147676843638423492543049796991123523927187459739930468205503066438785943949698540132875219507655321746115052086937044622144463354934231465240818738442701087727685727025564527724348230546821198218558358409159898254220118695279250266870179482840154385842596975845514160865084956147535331698190369161742531509778495480989286133286957419074929475822566519962926132757695123981111767850702450539589153810368593239896584361664541561211751418268407794038961899962270963667854139349266421000538919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giropay-admin.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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