fiducia-direkt.de

- Fiducia & GAD IT AG -

Issued by VR IDENT SSL CA 2018

About this certificate

This digital certificate with serial number 1d:b6:67:19:53:31:25:3a:c0:5e:9d:78:27:d4:f4:72:8e:60:6f:c8 was issued on by Fiducia & GAD IT AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fiducia & GAD IT AG

Organization: Fiducia & GAD IT AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

Fiducia & GAD IT AG

Organization: Fiducia & GAD IT AG
Organization unit: VR IDENT
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:b6:67:19:53:31:25:3a:c0:5e:9d:78:27:d4:f4:72:8e:60:6f:c8
Serial Number (int): 169628449163115165243527351512487946422558158792
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 62:f5:aa:7d:1c:77:76:1d:2e:f1:5b:5e:28:0f:9c:59:e7:da:8a:1c
AuthorityKeyId: 88:06:29:32:e2:f1:ef:76:bf:c5:22:c5:54:9c:17:67:28:2d:6c:16

Fingerprint (sha1): 78:47:68:b5:89:11:28:cc:e2:4d:20:f4:1c:a1:76:74:a3:b8:21:43
Fingerprint (sha256): ad:57:64:eb:75:32:22:16:59:d5:19:a2:7c:e0:0b:15:60:55:68:3b:92:79:34:b1:c0:23:97:9e:f4:1c:d4:d7

Issuing Certificate URL: http://trust.quovadisglobal.com/vrisslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/vrisslg2.crl

Check the revocation status for certificate fiducia-direkt.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fiducia-direkt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fiducia-direkt.de
www.fiducia-direkt.de
agree21itsm.rz.bankenit.de
itsm.fiduciagad.de
osa.fiducia-direkt.de
itsm.fiducia.de

Other certificates including the domain name fiducia-direkt.de

(limited to 100 certificates)
fiducia-direkt.de
www.fiducia-direkt.de
itsm.fiducia.de
www.fiducia-direkt.de
agree21itsm.atruvia.de
www.fiducia-direkt.de
fiducia-direkt.de
www.fiducia-direkt.de
www.fiducia-direkt.de
fiducia-direkt.de
fiducia-direkt.de
www.fiducia-direkt.de
agree21itsm.fiduciagad.de
agree21itsm.fiduciagad.de
www.fiducia-direkt.de
fiducia-direkt.de
www.fiducia-direkt.de
www.fiducia-direkt.de
www.fiducia-direkt.de

Certificate

The complete raw certificate details for fiducia-direkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5euNCVA1adqXX0NgyA6r
UJvGGVXW6JP+vPVNx/JjOhcobryawVrs6dw2eal6T8zn76Wa7w800ehbdVyYrFJ0
sK8FDBAav3d2m33H1GFIChGL+XdoCrH2SoumWdNgHZhtXKNXez/7TITCWMorMxw6
V+Cn5vk4JxWTSw6sICWBeKSDUX8JS4fov+cvyTq629/gTYGodu179WeHnLnzhSSf
w+9X1yriTP3VeBj34PI0QGUpEwdZF0FR+w+n9kww7KRY0U14FzqqRbujCf+rlTDO
MJzQYNIX20Es18m3SF4I6WX/1G8/qREn5lndCrjyjlsQkfsVVAJv8f5zX6lNxpnL
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169628449163115165243527351512487946422558158792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VR IDENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VR IDENT SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 13:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 14:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fiducia & GAD IT AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fiducia-direkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29024726326673303210677090850487980390726367486884394946649748864017378162313235634749945406836322858845109262310965412641751216282771393821752885810554560504388937645741838086402278002640876308107067611500511410593534770764805396314685503581139264340337436293138029471894962904995796638107653774716973581637816131509195882908679752685406548014686516277759105298416901408530610994164288351198094284602479870774016685302216525319948895112353906809832887647096179577515511659049841664554101966885983161454727039979548959658080437930374051831919850069758174820961662304557562321811377718814907073355336283126022176099309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 88062932e2f1ef76bfc522c5549c1767282d6c16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/vrisslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiducia-direkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiducia-direkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agree21itsm.rz.bankenit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsm.fiduciagad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osa.fiducia-direkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsm.fiducia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.1600.0.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/vrisslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62f5aa7d1c77761d2ef15b5e280f9c59e7da8a1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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