ebanking.qc.unicreditgroup.de

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 77:35:ba:f1:00:01:00:00:07:67 was issued on by UniCredit S.p.A..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Organization unit: XL78458
State / Province: Bayern
Locality: Muenchen
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 77:35:ba:f1:00:01:00:00:07:67
Serial Number (int): 562952759445359123498855
Serial Number lenght: 79 bits, 10 octets

SubjectKeyId: cf:f9:66:5e:7d:6e:aa:86:88:b6:c7:47:1f:4f:c5:af:59:3b:c8:de
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): a3:7e:c9:a9:5b:75:50:a0:8b:46:63:f8:5a:16:da:3d:35:be:c6:85
Fingerprint (sha256): 37:06:1a:4c:6f:89:c2:b9:9b:ca:d0:dc:25:24:0d:ec:b9:22:f0:75:6d:c9:be:81:2c:96:9f:5f:da:db:cc:a2

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate ebanking.qc.unicreditgroup.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebanking.qc.unicreditgroup.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebanking.qc.unicreditgroup.de
ebanking.qc.bankaustria.at
www.ebanking.qc.bankaustria.at
ebanking.qc.unicreditgroup.eu

Other certificates including the domain name unicreditgroup.de

(limited to 100 certificates)
www.hypovereinsbank.de
ebanking.it-v.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ConnectQA.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
www.hypovereinsbank.de
Connect.unicreditgroup.de
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet51.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.qc-v.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
uat.unicredit.eu
meet41.unicreditgroup.eu
ebanking.unicreditgroup.de
uat.unicredit.eu
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.test.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
mail.unicreditgroup.eu
mail.unicredit.it
ebanking.qc.unicreditgroup.de
virtuals.hypovereinsbank.de
corporateportal.test.unicreditgroup.eu
corporateportal.unicredit.eu
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
Exotesthybrid.unicreditqa.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
mail.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
corporateportal.preprod.unicredit.eu
meet41.unicreditgroup.eu
meet41.unicreditgroup.eu
uat.unicredit.eu
corporateportal.test.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet09.unicreditgroup.eu
ebanking.dev.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
Connect.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.unicreditgroup.de
meet51.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.unicreditgroup.eu
siplf.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
ebanking.it.unicreditgroup.de
sipf.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
mail.unicreditgroup.eu
virtuals.hypovereinsbank.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
www.hypovereinsbank.de
ebanking.it.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.unicreditgroup.eu
www.hypovereinsbank.de
mail.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
ebanking.it.unicreditgroup.de
virtuals.hypovereinsbank.de
ebanking.qc.unicreditgroup.de
siplf.unicreditgroup.eu
ebanking.it.unicreditgroup.de

Certificate

The complete raw certificate details for ebanking.qc.unicreditgroup.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlolYC3eF7MrwzAJisuCz
DjwNdKHIchiNKeSmM/1hyeo6RTnTfm/T42nV987zfOkmdvs2RXrJ+I0iUXgTnW8p
izlnxtD5kB1k9A/sVSbaGsxejlFKREUqbudCRvga+Lvl1+wG8n7DYslDrFc/D0+9
M9sV0M6JmkUa3mczGqbHl834pOysusK8S0m/IXWWHEKSFTq0ZXtTkjs3ytRHPWFL
Qi0/RBdfnmDJ5gg44ucI+kCTqrTrAPr9K46vmVWPpaZlWuptu03g+6F867irTIRC
RkM6G2zSWJ42PyXRVXh87sdNguIpHOLYBMKqc3fR12FqwGBakX0S7oCx0QiJhdJQ
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 562952759445359123498855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-09 06:17:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-08 06:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XL78458'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ebanking.qc.unicreditgroup.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19003472558524813354898378283569442631138374779388732417814349613689339970563188431163137412960526783543735629435287972826596277536142192461128126690722478099560106530070136749538968757953859967282746731591483398151193019191618959221502558413314350186883645368417007963799243916175775071864969487977056390280257215045584324740165959631015199164058733403302082757280094466739554348341901035033746628360635384583302552522643602513900098591977460351567997259980247067408174422422513684703023837153394599018169726271904594918175659761629114882278437021470148030012081712315941810372195902232590960830353992171905948471303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.qc.unicreditgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.qc.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebanking.qc.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.qc.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cff9665e7d6eaa8688b6c7471f4fc5af593bc8de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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