sparkasse-uecker-randow.de

- Sparkasse Uecker-Randow -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 4b:8a:a8:4f:3a:2f:a3:56:ff:13:ec:e7:10:fb:b3:a4:6f:63:89:0a was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sparkasse Uecker-Randow

Organization: Sparkasse Uecker-Randow
State / Province: Mecklenburg-Vorpommern
Locality: Pasewalk
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:8a:a8:4f:3a:2f:a3:56:ff:13:ec:e7:10:fb:b3:a4:6f:63:89:0a
Serial Number (int): 431266472472871287419799361190085584654950435082
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: bd:5e:e0:47:c0:cb:ed:c5:b8:99:21:4c:eb:5d:21:be:17:fc:8f:b5
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 37:48:02:e1:6d:06:7b:92:b3:f1:d1:87:49:37:30:78:32:a3:c2:d0
Fingerprint (sha256): 75:e0:c4:22:06:4c:cd:0e:c3:ab:d7:9e:e7:5d:6b:2c:7a:4a:31:96:b1:2c:aa:02:9d:a9:60:63:1b:01:31:61

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate sparkasse-uecker-randow.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sparkasse-uecker-randow.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sparkasse-uecker-randow.de

Other certificates including the domain name sparkasse-uecker-randow.de

(limited to 100 certificates)
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
psd2-xs2a.sparkasse-uecker-randow.de
module.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
giropay.sparkasse-uecker-randow.de
portal.sparkasse-uecker-randow.de
banking.sparkasse-uecker-randow.de
sicherheit.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de
www.sparkasse-uecker-randow.de

Certificate

The complete raw certificate details for sparkasse-uecker-randow.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431266472472871287419799361190085584654950435082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 06:55:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mecklenburg-Vorpommern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pasewalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sparkasse Uecker-Randow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sparkasse-uecker-randow.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909463422105132940413299218866038572602994508336869445434298777245780457626719649491439956154818822272268893573620751597198243459398230496938109848344998602044041975110400425141681624255021922396315104677571344474607884893271989743782204565776759600811609516116750728383136560575422019043995329135508152288144655055818983634136705825602374292514772804066929261703064593113907145042454490815672549284046972156434292573266865175456332186149139836126982041275915341741446707356041515173138270857098928142472146469894342060959685472038933236472552193191016686859199512144810418490859152390969071440307616295051372370058714767298085688615356274903951679251992045166144287285856948182498331233947174017092646878124572071914599895304934498699737075900789624490492404988181075287105888348919549475676767270079098340745474901285868489868713145543446903657835571056703674384408989984442577278452928278431057375406776949167006978768282943263548715270208806282286158392116146674084257159898600268988394708756494797777187163852888620102132872583320756297481076647737729489917018025452067042282792872917297904239726927881516421614564927347394330233742239967740093337277761353923622136573718564019826024774354293673012150667221801941587996434330129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkasse-uecker-randow.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd5ee047c0cbedc5b899214ceb5d21be17fc8fb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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