webkim.de

- akf bank GmbH & Co KG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 63:78:e0:1d:11:59:50:59:27:0a:ec:15:17:0e:c1:0b:e1:1a:c6:f3 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

akf bank GmbH & Co KG

Company registration number: HRA 15563
Organization: akf bank GmbH & Co KG
Address: Am Diek 50
Postal code: 42277
State / Province: Nordrhein-Westfalen
Locality: Wuppertal
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 63:78:e0:1d:11:59:50:59:27:0a:ec:15:17:0e:c1:0b:e1:1a:c6:f3
Serial Number (int): 567885698778681762683440859196295620354958345971
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4d:cb:c8:41:9a:eb:4c:62:b0:40:77:e1:47:70:a8:eb:eb:f8:76:2a
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): b0:cf:2b:bb:7a:8c:74:97:98:1d:5b:74:ce:f8:60:71:58:1d:0f:b1
Fingerprint (sha256): 70:14:64:02:71:d7:fb:75:a6:dd:54:4c:3a:e6:66:b6:e4:fb:6e:a9:36:c1:8c:90:f4:29:78:7c:46:9d:7d:57

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate webkim.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webkim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webkim.de
www.webkim.de

Other certificates including the domain name webkim.de

(limited to 100 certificates)
www.webkim.de
www.webkim.de
webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
www.webkim.de
webkim.de
www.webkim.de
www.webkim.de

Certificate

The complete raw certificate details for webkim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567885698778681762683440859196295620354958345971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 12:06:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 12:06:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '42277'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Am Diek 50'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'akf bank GmbH & Co KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 15563'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764570519083696406622847246261012322471498559163469550744197593897862575370012648559736470708995082751649216295850571642118176531828793771956461352681380525479614696953459059751903790083528669027615415266969186722061087354689537450794142185007738942235958793441196858259129223124585627674708929421006485576012690723373126146994472925807981326077930105254824672906427049545941679393423619320647835157202987999513137706262184530452703207924758190377542399928860871755755299042231202610823515863006246786551653180523722557023692472711703049635280877224192197040031289665383752805162318643559002530533990664268356718649949549731869659505653437498088978081580898939533185422583192967619568585704840258493583025378389408402279760093132812582402683431479227594071319904199286038023837764039303458511758995337950159101705814581414489447291789034011171259827749182553884912390871167568595193487538879006677755317376859256130608044640214658374320104648473896970326948951050764810808213342999288008984770593164221708838124246957667942359669655863506113906176417663887417666150076938322662290735219573906504595726970688901031529628299101195924716070669214495929148113957253527629494579450501347870613125245379448386620440719647962472702594110427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webkim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dcbc8419aeb4c62b04077e14770a8ebebf8762a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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