ebanking.unicreditgroup.de

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 3e:ca:26:6c:00:01:00:00:06:8a was issued on by UniCredit S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: XL78458
State / Province: Bayern
Locality: Muenchen
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:ca:26:6c:00:01:00:00:06:8a
Serial Number (int): 296515732828682553656970
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 14:5f:21:47:25:bd:d1:31:68:ea:d6:f3:c7:39:3c:41:13:07:9f:73
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 49:be:ee:46:4f:db:12:75:1d:7c:22:21:a4:f7:2e:ab:3c:62:3c:0d
Fingerprint (sha256): 2e:39:40:96:c1:9f:24:63:67:f0:1e:6f:ca:32:4d:88:03:ba:f3:28:04:90:35:dd:04:70:2b:95:1f:7b:7f:7d

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate ebanking.unicreditgroup.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebanking.unicreditgroup.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name unicreditgroup.de

(limited to 100 certificates)
www.hypovereinsbank.de
ebanking.it-v.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ConnectQA.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
www.hypovereinsbank.de
Connect.unicreditgroup.de
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet51.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.qc-v.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
uat.unicredit.eu
meet41.unicreditgroup.eu
ebanking.unicreditgroup.de
uat.unicredit.eu
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.test.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
mail.unicreditgroup.eu
mail.unicredit.it
ebanking.qc.unicreditgroup.de
virtuals.hypovereinsbank.de
corporateportal.test.unicreditgroup.eu
corporateportal.unicredit.eu
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
Exotesthybrid.unicreditqa.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
mail.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
corporateportal.preprod.unicredit.eu
meet41.unicreditgroup.eu
meet41.unicreditgroup.eu
uat.unicredit.eu
corporateportal.test.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet09.unicreditgroup.eu
ebanking.dev.unicreditgroup.de
uat.unicredit.eu
gtgdownload.it.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
Connect.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.unicreditgroup.de
meet51.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.unicreditgroup.eu
siplf.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
ebanking.it.unicreditgroup.de
sipf.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
mail.unicreditgroup.eu
virtuals.hypovereinsbank.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
www.hypovereinsbank.de
ebanking.it.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.unicreditgroup.eu
www.hypovereinsbank.de
mail.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
ebanking.it.unicreditgroup.de
virtuals.hypovereinsbank.de
ebanking.qc.unicreditgroup.de
siplf.unicreditgroup.eu

Certificate

The complete raw certificate details for ebanking.unicreditgroup.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwNaMujI/0tVGqvnmzXS
opva/2d6rDp14bhzKr58eSqkHEEA4spyyd1LvEVigbUhh+UPbashhwdL5K34UCjM
p5fgShWWOIg01tHLup0VZhyMxjVuoHeFHB+KKeesQdpsieIIjotrjwMwNBkrAvwb
UqGOHnKIQZ0RxhjxCLXB25hDnuIl3YQWtkKw03uOGH0OaNHhCpeNLgjHmDanB6Bu
HY/tguamAhae9GIWTGoQZPYvdeiCEJzqrygvgrByI3MHfu1PXQN0v7BvaKBOdk+x
iZNs45B4/7Nvfze8/2zyd5NQO/DfgUqkSGsMDKl8UyIWMSVL6qPVCeKvFnPAlVv0
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296515732828682553656970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-10 13:36:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-09 13:36:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XL78458'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebanking.unicreditgroup.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123075788373545611323882909071596090603082337105218934934630410612063867376611270728900371277033831090596177135369042717397851945902658641770767193269137228387582371523222619821135795629041815264379493157151075537577045304879731381780831414532397324952594395758374393357237194492208637769949105592060849973016095043072553432737993787299714801682085991615045977055155964157082435030316683767774768319189658315216756629859507513181355770864291777034820528408453383118604021850484903348756531173224497095807193918654817993396258844064635945530033358004183800897208499082317352072744577951527225313419847694115659314227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							145f214725bdd13168ead6f3c7393c4113079f73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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