sparkasse-rhein-nahe.de

- Sparkasse Rhein-Nahe -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 66:9a:cf:2e:b1:65:a7:4a:be:a3:3e:8e:8e:20:1f:87:be:7d:fe:50 was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sparkasse Rhein-Nahe

Organization: Sparkasse Rhein-Nahe
State / Province: Rheinland-Pfalz
Locality: Bad Kreuznach
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 66:9a:cf:2e:b1:65:a7:4a:be:a3:3e:8e:8e:20:1f:87:be:7d:fe:50
Serial Number (int): 585769421516583270490731811781841604569032687184
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 09:64:f4:2f:ce:4b:ae:f4:42:79:da:ac:41:c2:cd:0f:7f:b8:27:5d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): fc:3b:49:94:e3:b3:4f:3b:e4:74:c3:94:22:9e:e6:b2:1b:d5:8a:b5
Fingerprint (sha256): 73:02:9e:de:bf:4c:a8:d4:9f:85:68:fc:9f:74:e6:4c:25:da:2b:97:5e:40:75:9d:32:16:60:68:b3:d4:45:a1

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate sparkasse-rhein-nahe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sparkasse-rhein-nahe.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sparkasse-rhein-nahe.de

Other certificates including the domain name sparkasse-rhein-nahe.de

(limited to 100 certificates)
giropay.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
news.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
praktikum.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
psd2-xs2a.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
digi-check.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
module.sparkasse-rhein-nahe.de
www.sparkasse-rhein-nahe.de
*.blog.sparkasse-rhein-nahe.de
giropay.sparkasse-rhein-nahe.de
bankingportal.sparkasse-rhein-nahe.de
blog.sparkasse-rhein-nahe.de

Certificate

The complete raw certificate details for sparkasse-rhein-nahe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqpuYn+c5i9kIUpbS9SAx
qKSuD8Rgvu+0v3Mb3bSYDViji7RJ2XItorEvrpSDmmI+mMXRjGcvyicAjWvC8eh1
g5VVwGoWeNFWAB0TxoL+JL/hMI+y1vrfyw6hEvx9nXhUvNnWFt1++dop4CXL688/
12RGcG0YTy0R+xw3slTeIQgsLl7JtZ1pa1bkrG9YbdZgn+Qbfzdft+o8Z4wRdaAh
7RdLS9dwGf4jut+ZeAfaSS0MIpXT8jKOUUqU3PXK0P7dNPju09FGaGlStVvyhmHp
MZ0xM+oImOBtHY/iSCG87PJnPKBlTYxUXBHQlwrtJdCDoZIFHHXt1zezGhz/AUPZ
BjWpweIgub1GjmdYHcdKE5qTTDQOFrs2oOdhGJ3CguG3WT1+SteekTVvDkSgSbqE
2om3XQuvOSXVUb4dz59D3xb6Z6BmRJdBvYo4kVj7kzz+3CeFyqgexlB6IR0ali5Z
jNTS7E8urTXvvTde4hm9WP8ZLEkG+vNKBjUMtBPry7jf1YiVhu9Ac5dvB3ewvi2s
pa8et9kD0FlqO3fWC+YsmdBelczPctgLHQumA9uQroqznc0l3KkKaoEKkHHjWpPL
elb9yH9OIY5ShMqftz8xaLZIzqL9yAXRsyREymCifdiyDRobCdR2IEtoowydD0CQ
hrTcgsW4ygkPpejAhOMwNAUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 585769421516583270490731811781841604569032687184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 14:47:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bad Kreuznach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Rhein-Nahe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sparkasse-rhein-nahe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696019089505814359712847952375776893575350555758380108465571315160151183745853727754923559459639491491346248870885255043388609145976516388472489948367748356467816348605159732464060700627481608345479347342634475822632967720460501623053650543138836935805896401570375863576015521464982203025980615707154526445846169601002213426068567553330960621473781515117974676754118786462609635618625284601572593503750253852583666467816755896207748970845694851525671264616005785485606260830254846216210531580045219184697381708912090130640980704904108366826259108431906599011373117291024000012480538665966268416893378669783671151565103529184077499718037867950155658595996354205798347430363176306104577383514290655219471612983241248918018148399375489844619732137526955466730868946619355899152871939084482269979589619755928490808234671861556325439759340432743810830917904866617741636237417591182140024138745659246223524542295268253634916111087024902308409767085712997412638341428763859893975153254201530098970821058997930658870937173471796567882967946602683103966429854128024699876876799986066474236502522126272182079223286067400234602531677083942901699674241129392305421359599005450892643497799595082112318288014420793455253367788324156302891901006853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-rhein-nahe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0964f42fce4baef44279daac41c2cd0f7fb8275d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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