ebanking.unicreditgroup.de

- Unicredit S.p.A. -

Issued by Actalis Authentication CA G3

About this certificate

This digital certificate with serial number 42:51:96:29:6e:6d:03:2b was issued on by Actalis S.p.A./03358520967.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Unicredit S.p.A.

Organization: Unicredit S.p.A.
Organization unit: XL78459
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Milano
Locality: Milano
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 42:51:96:29:6e:6d:03:2b
Serial Number (int): 4778765784307270443
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 59:df:49:a2:1a:1d:b6:91:48:33:69:ef:41:04:cb:ec:27:a5:ee:be
AuthorityKeyId: aa:aa:fd:ca:8c:1d:4d:f1:2e:83:e1:06:fc:fa:8e:ea:0e:23:ae:3d

Fingerprint (sha1): 7f:4f:13:7b:5f:bb:b5:59:df:2b:25:53:bf:9f:1c:63:fc:a9:50:2b
Fingerprint (sha256): 76:5e:4e:ef:5a:47:38:3d:d2:35:72:ec:1d:18:c4:26:35:e1:38:84:e7:9f:ce:5d:62:4d:58:d2:61:20:f6:da

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autg3

Revocation information

OCSP Server: http://ocsp03.actalis.it/VA/AUTH-G3
CRL Distribution Point: ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary
CRL Distribution Point: http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL

Check the revocation status for certificate ebanking.unicreditgroup.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebanking.unicreditgroup.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebanking.unicreditgroup.de
ebanking.bankaustria.at
www.ebanking.bankaustria.at
ebanking.unicreditgroup.eu
ebanking.unicredit.eu
ebanking.unicreditgroup.co.uk
ebanking.unicredit.co.uk
ebanking.unicreditgroup.it
ebanking.unicredit.it
ebanking.unicredit.ro
ebanking.unicreditgroup.ae
ebanking.unicredit.ae
ebanking.unicreditgroup.hu
ebanking.unicredit.hu

Other certificates including the domain name unicreditgroup.de

(limited to 100 certificates)
www.hypovereinsbank.de
ebanking.it-v.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ConnectQA.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
www.hypovereinsbank.de
Connect.unicreditgroup.de
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
ConnectQA.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet51.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.qc-v.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
ebanking.qc.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
uat.unicredit.eu
meet41.unicreditgroup.eu
ebanking.unicreditgroup.de
uat.unicredit.eu
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.test.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
mail.unicreditgroup.eu
mail.unicredit.it
ebanking.qc.unicreditgroup.de
virtuals.hypovereinsbank.de
corporateportal.test.unicreditgroup.eu
corporateportal.unicredit.eu
ebanking.it.unicreditgroup.de
ebanking.unicreditgroup.de
gtgdownload.unicreditgroup.de
Exotesthybrid.unicreditqa.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.qc.unicreditgroup.de
mail.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
corporateportal.preprod.unicredit.eu
meet41.unicreditgroup.eu
meet41.unicreditgroup.eu
uat.unicredit.eu
corporateportal.test.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
meet09.unicreditgroup.eu
ebanking.dev.unicreditgroup.de
gtgdownload.it.unicreditgroup.de
corporateportal.unicreditgroup.eu
gtgdownload.qc.unicreditgroup.de
ebanking.unicreditgroup.de
ebanking.it.unicreditgroup.de
Connect.unicreditgroup.de
gtgdownload.unicreditgroup.de
ebanking.unicreditgroup.de
meet51.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
corporateportal.uat.unicreditgroup.eu
gtgdownload.unicreditgroup.de
corporateportal.unicreditgroup.eu
siplf.unicreditgroup.eu
ebanking.qc.unicreditgroup.de
ebanking.it.unicreditgroup.de
sipf.unicreditgroup.eu
Connect.unicreditgroup.de
ebanking.unicreditgroup.de
mail.unicreditgroup.eu
virtuals.hypovereinsbank.de
gtgdownload.it.unicreditgroup.de
www.hypovereinsbank.de
ebanking.unicreditgroup.de
meet04.unicreditgroup.eu
ebanking.unicreditgroup.de
www.hypovereinsbank.de
ebanking.it.unicreditgroup.de
ebanking.qc.unicreditgroup.de
corporateportal.unicreditgroup.eu
www.hypovereinsbank.de
mail.unicreditgroup.eu
mail.unicreditgroup.eu
ebanking.it.unicreditgroup.de
ebanking.it.unicreditgroup.de
virtuals.hypovereinsbank.de
ebanking.qc.unicreditgroup.de
siplf.unicreditgroup.eu
ebanking.it.unicreditgroup.de

Certificate

The complete raw certificate details for ebanking.unicreditgroup.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9ahpm1/Fix8GFBuemys
EQwxcep8tAGr3+xZ/sru92o9wYGy1Ss3aPLWg1wLmkqZG4gzdQOxBTJLm9NLYQVi
R8vt9uP0q4BKwqyLReQNB9kAn0Fhmn4YUwVwFRLzyL/OGlInwfOzKzGFBdhCFaAL
2/Sv0E6hsXd8zHSlfq5UTWqPAUv0I0sfc0nYK3vPuzEpIg2S0A6xypJgUdh+3R2K
eaNie0uRU91hrcNSLt0UgoICFaTRc+G65y2ufjNl9B/KWqxlRmF00tU3q/W55df/
0F1+OXwt9Il4D4iv9/MLRDH4wvTOU/Nu0Tu34TCk+B034R9TOI28eNZMy4dd7rzB
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4778765784307270443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Authentication CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-18 12:11:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 12:11:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Unicredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'XL78459'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ebanking.unicreditgroup.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24722308178936359569884391621951007179660924014756349462950095789640906433883720807967088567057677159357192341780517741768142022509884945056884063253455875426437325054925329376345452993038072298432492253299934800620732338997439780774502818555697147075153501737636982392938294293225181410944510366204409294852303903093683504463479780797727633238397187601622414042993396560634825090961720747819849817644200014748168752312209048079236667112468586589587347460667275985615352043510562018900422739541342123768874636800185050810000994503844533708001620954791074539400728132543256010330168332185041279228339049301831340310789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.actalis.it/VA/AUTH-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59df49a21a1db691483369ef4104cbec27a5eebe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName aaaafdca8c1d4df12e83e106fcfa8eea0e23ae3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://portal.actalis.it/Repository/Policy/SSL/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap03.actalis.it/cn%3dActalis%20Authentication%20CA%20G3,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl03.actalis.it/Repository/AUTH-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebanking.bankaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicreditgroup.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.unicredit.hu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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