www.onemarkets.de

- UniCredit Bank AG -

Issued by UniCredit Subordinate External

About this certificate

This digital certificate with serial number 12:d1:c3:c1:00:00:00:00:05:e2 was issued on by UniCredit S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

UniCredit Bank AG

Organization: UniCredit Bank AG
Country: DE

UniCredit S.p.A.

Organization: UniCredit S.p.A.
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 12:d1:c3:c1:00:00:00:00:05:e2
Serial Number (int): 88872071758566811239906
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: ef:8a:11:cd:f7:e1:8d:2d:58:1c:b2:34:c5:9a:d6:a6:38:d9:09:95
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27

Fingerprint (sha1): 11:3c:4e:d7:2c:b7:94:3f:36:a6:99:7c:a9:42:e1:99:97:c3:a9:17
Fingerprint (sha256): 62:19:c5:79:22:02:56:a9:98:34:b3:7b:32:fd:80:69:4e:11:36:b0:23:5b:68:2a:00:35:88:0a:39:28:b3:ba

Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt

Revocation information

CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crl

Check the revocation status for certificate www.onemarkets.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.onemarkets.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name onemarkets.de

(limited to 100 certificates)
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de

Certificate

The complete raw certificate details for www.onemarkets.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqROv3zaNkY+AgqJtCBt6
O9Rcr6h0jduewfEV/d+Xt14NRKRriikz8H5bWLDuQHRx4TewvFEp/sxPAuS6RJtt
n2wJqvXz8UaF84Jn4jJGxDbC1uKcGLhEQbGhSDEl5ZSxvqYjvffTEkwbNSWbzwk8
sc/A11GxdX1BYlgQgzAaEIi0lEIpeLQ3Ut2uyk7VWYDBcgeQVn05ffl8eNniKXCW
LZS19NuqJH0yTmCtCGw0EawxF/GUrMVc00TNG9litlcI5idoysaZhAzONcRQQKuD
va2WySrVmbfne1Kzj4UAw4TWcnktOf+Qw6wWMSEQzS5tWidm3yR/FqTUPxsDdHw1
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88872071758566811239906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 14:32:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-24 14:32:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.onemarkets.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21343981560644595810512449678885136403883405126790699125428065203037535962404891794046518171856081160963727651976447432878257528528689028977868174560100384048275263772447333979719966605208628144867688551193057448948309457442577963570807897756734357017211977613315225306657996246717310389282188242311235625542979892616495009643423499117835208822153340571335420183230027687849698424059171490453055530576825025510205626247629732102872182168137179015271726230039738653819640274467377901871241202788938739886875237686552267957313434546073826596206837360215982929757306676797698884953462084293562277859029020337802781144553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef8a11cdf7e18d2d581cb234c59ad6a638d90995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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