giropay.sparkasse-uecker-randow.de

- Sparkasse Uecker-Randow -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 68:48:66:e1:9e:9d:ca:86:48:19:36:e1:b3:e9:bc was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sparkasse Uecker-Randow

Company registration number: HRA 1432
Organization: Sparkasse Uecker-Randow
Organization unit: Sparkasse Uecker-Randow
State / Province: Mecklenburg-Vorpommern
Locality: Pasewalk
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:48:66:e1:9e:9d:ca:86:48:19:36:e1:b3:e9:bc
Serial Number (int): 541467357877544085358007181032810940
Serial Number lenght: 119 bits, 15 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 99:b2:8e:18:8e:45:dd:4f:46:de:57:16:ad:0f:15:ff:26:f8:84:2c
Fingerprint (sha256): 2c:91:4f:6f:be:c4:96:1a:f7:e3:64:3d:7e:bb:20:a3:8c:1e:2e:67:8f:7d:8f:5a:c0:7a:d4:7b:18:b3:e8:8a

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate giropay.sparkasse-uecker-randow.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giropay.sparkasse-uecker-randow.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giropay.sparkasse-uecker-randow.de

Other certificates including the domain name sparkasse-uecker-randow.de

(limited to 100 certificates)
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
psd2-xs2a.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de

Certificate

The complete raw certificate details for giropay.sparkasse-uecker-randow.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/eBoQqD/lz0Tz/+zh6A
8xTCkzkVlTv/BTXmJ1B8ncDpvjQhdom00sSmUI5rD/8Pq8A701Kx+Mj+f9hFgM1l
l4oYiyVEP3RJolsRONMsQ/34VsRFsLBDtyCTW4q9aW6kWR8K+KUV46738bMv9crj
pmrsQSLSK80MNN2YbB3Ei20eePi6h1eYIVNUwdz4+SnwFWE1E+DW/V2P3D1Qf2D0
kdqEr5HiVyHw2eEDx7XrODHXwyMef2yPBgqonPZk1R7pjeQDvgPOYK2ZNM8dnCzU
5a1aD+3Zx0sVSMmnBMRZnBhAN9HB6qEgBq6mw+RMkGxmohHMv6BeNG9qMKi4Veup
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 541467357877544085358007181032810940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Neubrandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 1432'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pasewalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sparkasse Uecker-Randow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sparkasse Uecker-Randow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'giropay.sparkasse-uecker-randow.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24738519405107338185536330596265529425242266157046772649116520815374543279263918500958160593883038882945636250827247263751955752480823754113052667903322452273252350062619434763140410352634074256132953058670820490510488465736066797295016994259302570366797818766537558827826106361255006626201166553789974576009980700663097658971688811142501869969972325607920113862157264605703298911491038821598620932526359574912556870588876822871969454763004547744928549078156023437562611538285785779351556645127904865036083100572459872686327274316852504886655935693299390640745292043477636474691125775848093964997201371172660027566373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giropay.sparkasse-uecker-randow.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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