openbanking.olb.de

- Oldenburgische Landesbank AG -

Issued by D-TRUST SSL Class 3 CA 1 2009

About this certificate

This digital certificate with serial number 45:b9:8c:1b:ff:d9:13:d7:3c:42:76:00:73:66:02:24 was issued on by D-Trust GmbH.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oldenburgische Landesbank AG

Company registration number: CSM040923956
Organization: Oldenburgische Landesbank AG
State / Province: Niedersachsen
Locality: Oldenburg
Country: DE

D-Trust GmbH

Organization: D-Trust GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 45:b9:8c:1b:ff:d9:13:d7:3c:42:76:00:73:66:02:24
Serial Number (int): 92680148383674145563291976782705984036
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b3:f4:13:6e:30:0e:77:64:b6:fa:93:b7:31:0a:08:5e:05:78:e6:aa
AuthorityKeyId: 50:19:32:94:9a:c4:b5:04:4d:56:d0:c0:83:21:d5:35:55:b0:b1:7a

Fingerprint (sha1): 55:36:2b:16:67:b1:cd:dc:ca:9a:bb:bd:f4:41:3f:ef:ce:a3:d6:8e
Fingerprint (sha256): 8a:b2:20:09:54:69:3d:d8:7f:48:ff:b7:aa:2b:b6:ff:01:bb:09:7a:10:8d:6f:79:36:63:50:06:5d:7d:4d:b4

Issuing Certificate URL: http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt

Revocation information

OCSP Server: http://ssl-c3-ca1-2009.ocsp.d-trust.net
CRL Distribution Point: http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl
CRL Distribution Point: http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl

Check the revocation status for certificate openbanking.olb.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openbanking.olb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openbanking.olb.de
openbanking-dev.olb.de
openbanking-int.olb.de

Other certificates including the domain name olb.de

(limited to 100 certificates)
expe01.video.olb.de
magazin.olb.de
mbanking.olb.de
magazin.olb.de
3d-secure.olb.de
teamsphone-osv.olb.de
ip.olb.de
rsu-kis.olb.de
hbciweb.xs2a.olb.de
www2.olb.de
srcwpb.olb.de
digitalefiliale.olb.de
mbanking.olb.de
rsu-kis.olb.de
securemail.olb.de
mbanking.olb.de
videoberatung.olb.de
daten.olb.de
internet-int.olb.de
srcms.olb.de
rsu-kis-int.olb.de
magazin.olb.de
urc.olb.de
rsu-kis.olb.de
xs2a.olb.de
safelock.olb.de
3d-secure.olb.de

hbciweb-dev.olb.de
wuerttembergische-int.olb.de
mdm-int.olb.de
hbciweb-dev.olb.de
www.olb.de
wuerttembergische.olb.de
developer-portal.olb.de
hbciweb-admin-int.olb.de
sso.olb.de
www-int.olb.de
xs2a.olb.de
rsa.olb.de
mbanking.olb.de
www.olb.de
vdbebics.olb.de
safelock.olb.de
*.olb.de
www.weihnachten.olb.de
vdbebics.olb.de
weihnachten.olb.de
safelock.olb.de
src.olb.de
conntest.olb.de
hbciweb-dev.olb.de

wertpapiere.olb.de
xs2a.olb.de
magazin.olb.de
www-int.olb.de
daten.olb.de
news.wuestenrot.olb.de
wuerttembergische.olb.de
securemail.olb.de
videoberatung.olb.de
rsa.olb.de
www-int.olb.de
ods.olb.de
www.olb.de
videoberatung.olb.de
wertpapiere.olb.de
src.olb.de
www.olb.de
www.olb.de
securemail.olb.de
adfs.olb.de
ebanking.olb.de
exchange.olb.de
www.olb.de
exchange.olb.de
xs2a.olb.de
ebanking.olb.de
wertpapiere.olb.de
daten.olb.de
internet-int.olb.de
pfandbrief.olb.de
www.olb.de
srcms.olb.de
hbciweb.olb.de
ssrp.olb.de
rsu-kis.olb.de
rsu-kis.olb.de
ip.olb.de
mbanking.olb.de
videoberatung.olb.de
digitalefiliale.olb.de
3d-secure.olb.de
video.olb.de
www.olb.de
sso.olb.de
srcms.olb.de
magazin.olb.de
www.olb.de

Certificate

The complete raw certificate details for openbanking.olb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92680148383674145563291976782705984036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-Trust GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'D-TRUST SSL Class 3 CA 1 2009'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 10:47:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSM040923956'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oldenburgische Landesbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openbanking.olb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872950555837002107361005399501846398658705080283841578277401364989599172062427740016385888411812134181282180115657977831257544631045579790720614583218021798537672260504770187826988304236679272196110511013290795070185465025261965516009424147835733651891682450680297607712642928373468417243879268023896547952817771915018098147265455319135208083232659267982913365029866670246044746469303514681242647661542683388930645335208511011507559372784208323296601195086078623867107863825934000273271167187911030758129336448780473500425880125561132757712110957506589585213934745462911995878863589849536712521186413393900963134699029827017796597084536218987566653773392451291058551887053329888519741292264605159348450505808278560532553368418064364127251274637372126144851104637171276875000335453700312521031957633609267406935670885139992875564404598755831157840242753590696745401105727768895173775693718484408249588298883423332026697262615214586368231561790186404885576342423711217309756074688298341625635474910268023554630900654924436044917488502442308217712507358905626254956846790944074092935233510914281140233938751472764501804508419719893010555434611327508501663728142425689172708123382633118799044670961003706772043631984224709468957667694131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-c3-ca1-2009.ocsp.d-trust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net/cgi-bin/D-TRUST_SSL_Class_3_CA_1_2009.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4788.2.200.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.d-trust.net/internet/files/D-TRUST_CSM_PKI_CPS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.d-trust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.d-trust.net/crl/d-trust_ssl_class_3_ca_1_2009.der.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdn.d-trust-cloudcrl.net/crl/d-trust_ssl_class_3_ca_1_2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking-dev.olb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openbanking-int.olb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 501932949ac4b5044d56d0c08321d53555b0b17a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3f4136e300e7764b6fa93b7310a085e0578e6aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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