www.ikanobank.de

- www.ikanobank.de -

Issued by GlobalSign Domain Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:27:76:ba:64:09 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

www.ikanobank.de

Organization: www.ikanobank.de
Organization unit: Domain Control Validated
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Organization unit: Domain Validation CA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:27:76:ba:64:09
Serial Number (int): 1208925819615898181985289
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: b1:20:dc:4c:91:0a:ab:1c:22:0c:10:e5:b1:cf:a3:1d:9e:24:21:ab
AuthorityKeyId: 36:12:4e:9e:71:c4:26:41:f1:fa:f1:29:4c:bf:17:a4:53:28:b6:eb

Fingerprint (sha1): e8:2b:fc:3d:17:13:70:16:b7:b3:48:21:4a:07:3a:ef:e2:e8:25:aa
Fingerprint (sha256): 46:ae:af:bd:7c:90:9e:cd:66:41:06:8a:73:76:34:d6:59:ba:1f:c2:3e:34:40:37:c8:7f:bd:63:de:23:f1:ab

Issuing Certificate URL: http://secure.globalsign.net/cacert/dvhe1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/DomainVal1.crl

Check the revocation status for certificate www.ikanobank.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikanobank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikanobank.de
ikanobank.de

Other certificates including the domain name ikanobank.de

(limited to 100 certificates)
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
etracker.ikanobank.de
etracker.ikanobank.de
www.ikano.dk
ssl508615.cloudflaressl.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508616.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikanobank.de
www.ikano.dk
www.ikano.dk
ssl4788.cloudflare.com
www.ikano.dk
ssl323815.cloudflaressl.com
www.ikanobank.de
www.ikano.dk
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
etracker.ikanobank.de
ssl4788.cloudflare.com
sslgw.ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
antrag.ikanobank.de
ssl323815.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
ikanobank.de
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
antrag.ikanobank.de
antrag.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508617.cloudflaressl.com
antrag.ikanobank.de
www.ikano.dk
www.ikanobank.de
ssl4788.cloudflare.com
www.ikano.dk
ssl4788.cloudflare.com
ssl4788.cloudflare.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
antrag.ikanobank.de
www.ikano.dk
ssl4788.cloudflare.com
ssl323814.cloudflaressl.com
ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
zahlung.ikanobank.de

Certificate

The complete raw certificate details for www.ikanobank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoONjpZl3G2eZrVNz+oT
otB+Pfx1B8eOTbf0Dywoi6VOE1Emmn89nCQTYPHFY+UoLJBo/wTh1VIOyeWiW+Rw
z9/bGJFVAF3+vzaGWx8p93cS6kYff1xdPgcKE71h2Y3KlpnzecbpHWFq/QXFxBs5
i+FLgjxSfoF9m+rFeNQh0fM/ko3bWwKpBT4lsEASW3t9vnQhRxXpHGsnV5psXHB4
tZkdShc4MTfBgISwD1MeAvEZhs6eByjmsHHr5uvLKT0gOBeD97ElQ2YrgwO0wCEc
XvHyBWOzrqmi5gC8JZNfjZjNw8pwRjCBITNHkwGzOiKOp5mCb1j59iYzASg+26cq
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615898181985289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-19 13:00:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-20 13:00:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikanobank.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikanobank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25060055564139817388666189427667171566423164381640973495003350562897960390174583880304378219858254886536485391565613565455623073579779615933999198156165776607841850713272689305275481201256456982214121048378987384638366945850281868643281090540070661773726294754291591613085740347331958888562335761448542869745020228201812482549530801217210050971464744040947612716211451113851381761460124304052802432859817382519717186290197301520847893382899816035899627467608769035882176298342010312415476496105581349599335531965892144595603327699184560575220598025610127044952711404785475281692329472659157243179663333163777783179961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36124e9e71c42641f1faf1294cbf17a45328b6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/dvhe1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/DomainVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b120dc4c910aab1c220c10e5b1cfa31d9e2421ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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