fints1.atruvia.de

- Atruvia AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 38:f5:81:4d:34:ff:fb:c4:df:6b:f2:be:dd:fb:f5:0d:00:98:d7:4c was issued on by QuoVadis Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 38:f5:81:4d:34:ff:fb:c4:df:6b:f2:be:dd:fb:f5:0d:00:98:d7:4c
Serial Number (int): 325178429496851463973229443684150772915490051916
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: dc:0a:d6:a8:ec:e5:b1:d8:71:d0:a3:d4:74:ff:aa:b2:21:35:72:10
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 8e:c0:b3:c1:f7:b6:0a:9b:8f:86:00:d0:f2:72:e9:f6:72:ee:d7:18
Fingerprint (sha256): 1f:db:10:37:7d:bb:b0:53:d8:9f:65:7f:ab:f7:af:97:d6:4d:3c:e5:2c:6d:c4:53:c1:b9:03:da:ee:d9:66:61

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate fints1.atruvia.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fints1.atruvia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fints1.atruvia.de
*.fints1.atruvia.de
*.hbci-pintan.gad.de
hbci-pintan.gad.de

Other certificates including the domain name atruvia.de

(limited to 100 certificates)
fints-test.atruvia.de
atruvia.de
fiduciagad.de
paydirekt-ms.atruvia.de
agree21itsm.atruvia.de
webdav-uit-a.fiducia.de
test1333.atruvia.de
atruvia.de
fints1.atruvia.de
vpnb-inte.atruvia.de
karriere.atruvia.de
vpnc.atruvia.de
vpnb-ms.fiduciagad.de
KA-E.VPNB.ATRUVIA.DE
vpnb-ka.atruvia.de
test1333.atruvia.de
awbt.atruvia.de
matomo.atruvia.de
vpnc.atruvia.de
agree21mdm.atruvia.de
api-test.atruvia.de
KA-E.VPNB.ATRUVIA.DE
test1333.atruvia.de
ckm20230620dt.atruvia.de
paydirekt.atruvia.de
citrix-t.uit.fiducia.de
agree21itsm.atruvia.de
api-test.atruvia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
citrix-t.uit.fiducia.de
vpns-inte.atruvia.de
vrnetworldsoftware-inte.atruvia.de
citrix-t.uit.fiducia.de
digitale-privatbank.atruvia.de
citrix-p.uit.fiducia.de
datenservice.atruvia.de
besuchermanagement-test.atruvia.de
citrix-t.uit.fiducia.de
lp.atruvia.de
geno-dfin-inte.fiduciagad.de
shop-qas.scc.atruvia.de
besuchermanagement-test.atruvia.de
api-test.atruvia.de
test1333.atruvia.de
atruvia.de
datenservice-test.atruvia.de
fiduciagad.de
*.hub-satu.atruvia.de
*.hub-witu.atruvia.de
uit-abnahme-sharepoint.fiducia.de
citrix-t.uit.fiducia.de
fints2.atruvia.de
atruvia.de
vpns.fiduciagad.de
p2.giroapi.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
integrationsplattform-01.atruvia.de
vpnc-inte.atruvia.de
shop-dev.scc.atruvia.de
awbt-inte.atruvia.de
citrix-a.uit.fiducia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
atruvia.de
paydirekt-ms.atruvia.de
fiduciagad.de
p1.giroapi.atruvia.de
lightsout.atruvia.de
uit-sharepoint.fiducia.de
shop.scc.atruvia.de
*.hub-satu.atruvia.de
integrationsplattform-02.atruvia.de
*.hub-demo.atruvia.de

Certificate

The complete raw certificate details for fints1.atruvia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Z2F0FBRrtCHITqqrFS
X4Q/zt3n2sM3VLx1BDVjAfWEj4ymc9AV73VbujqQCq0mEE53MPtpSJkBAcCQMqLn
DmcdA+aEovu/hhdD0Jn85psmpTGH1K/6od6LrbrQwsbO/8vwMEmj+xjgKqf6dA0v
Bp2vtZbySBidTIrGG0cv9jWgH3mbb7D86+J95TkWsttSB4lqUjsC98j25CeHqnd2
kWffrboMWvDsCpgerbE7E6Qog8POZltM49Fqh9O80ym0lzu5ZydtOdUHYc4J5oBJ
1OCPmzCHlb1vsxdp+4x3aQ+IgA88vnIVlPHiKEKj03ccMGyXQ5Gg8AgkMP8uMdqt
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325178429496851463973229443684150772915490051916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 07:14:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 07:09:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fints1.atruvia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18631226058558321947690789725447848136520996918298285675398753359034227158770698478250232874798685214993685923222334571800961062736183444004580954675970644879990838419410434677282096722849989741070662290601524334453307858550920187262489752430579629237222163253592976082755157597235899171501308274482745352543728754626088021269215544924874860336100878743346252629655727041770720714372478363178273321173295193370856106217264511922442311122800408264082935941822500381711960632987864132828612713903080176690371295862825513906022621499568891216698777170632576478295102381773818824307060885181558704891930242157731835981243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fints1.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fints1.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbci-pintan.gad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbci-pintan.gad.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc0ad6a8ece5b1d871d0a3d474ffaab221357210
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000187030dc2710000040300463044022002187473fdbaf35a2e390df94298b2b5aebfb3d493fa2ab6892151d0bc51ef4202205f6d5601592edece0bc48f73af04e12d01e96b04c56c36a66b1e17b28735072200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000187030dc142000004030046304402202226f88415ee5f7f521e9acc728ebb44462222da328635281a684ee294beac5802200e29ddaa507ad05f9e6b6dc2a130cdbf5b67ee6419c476b109583e818bd5c487007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187030dc2450000040300483046022100c103f38e2cf3b15b61e317e18a871ad3be077b4ed975b733bbe36bc7a703f865022100f0c45e783a02ba1acf0a34c0754dbcb4cf978161f7591d7e535c0d10d5a2426f0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000187030dc2b900000403004830460221009da631d3dec7f47ce34a30349d31e955c17395548358668b67296f190b28db48022100e628f0c0f2c248a63dcd57fbf1a54c08b8f78b4d83c7cb60ee9c5a98b299af44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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