www.ikanobank.de

- Ikano Bank GmbH -

Issued by GlobalSign Organization Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:2b:7b:93:8b:e4 was issued on by GlobalSign.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Ikano Bank GmbH

Organization: Ikano Bank GmbH
Organization unit: IT
State / Province: Hessen
Locality: Wiesbaden
Country: DE

GlobalSign

Organization: GlobalSign
Organization unit: Organization Validation CA

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:2b:7b:93:8b:e4
Serial Number (int): 1208925819615915443194852
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: 4d:b1:73:0d:9a:9c:64:50:0a:5e:1b:89:74:13:46:d1:e2:c3:00:7e
AuthorityKeyId: 7d:6d:2a:ec:66:ab:a7:51:36:ab:02:69:f1:70:8f:c4:59:0b:9a:1f

Fingerprint (sha1): 56:9a:1b:a0:91:95:06:9d:e8:2c:20:c8:29:f7:38:36:58:93:26:03
Fingerprint (sha256): b0:30:27:54:ed:2b:61:50:fa:c0:fd:c1:72:be:da:6c:33:cb:43:66:78:2c:09:c2:50:38:5f:e3:64:d5:db:c8

Issuing Certificate URL: http://secure.globalsign.net/cacert/orgv1.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.net/OrganizationVal1.crl

Check the revocation status for certificate www.ikanobank.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ikanobank.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ikanobank.de
www.ikano-shoppingcard.de
ikanobank.de

Other certificates including the domain name ikanobank.de

(limited to 100 certificates)
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
etracker.ikanobank.de
etracker.ikanobank.de
www.ikano.dk
ssl508615.cloudflaressl.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508616.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikanobank.de
www.ikano.dk
www.ikano.dk
ssl4788.cloudflare.com
www.ikano.dk
ssl323815.cloudflaressl.com
www.ikanobank.de
www.ikano.dk
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
etracker.ikanobank.de
ssl4788.cloudflare.com
sslgw.ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
antrag.ikanobank.de
ssl323815.cloudflaressl.com
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
ikanobank.de
www.ikano.dk
sslgw.ikanobank.de
www.ikano.dk
antrag.ikanobank.de
antrag.ikanobank.de
www.ikano.dk
www.ikano.dk
www.ikanobank.de
www.ikano.dk
ssl508617.cloudflaressl.com
antrag.ikanobank.de
www.ikano.dk
www.ikanobank.de
ssl4788.cloudflare.com
www.ikano.dk
ssl4788.cloudflare.com
ssl4788.cloudflare.com
etracker.ikanobank.de
www.ikano.dk
www.ikano.dk
antrag.ikanobank.de
www.ikano.dk
ssl4788.cloudflare.com
ssl323814.cloudflaressl.com
ikanobank.de
sslgw.ikanobank.de
ssl4788.cloudflare.com
zahlung.ikanobank.de

Certificate

The complete raw certificate details for www.ikanobank.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3wqRJUxaGk5X/SY7bec
Y6AZX7+xu7aGAo7gTcykQwWd8aHNA8aM2EjLxLHpOfQDuv3mueo206sgLbaJbTso
+3EYkUaI4/b1PLwLbre/3vs8FNAVXhmo2ybCZEmvCfCPZR6DM7icfc1Xknyd1z6b
6gKsVulv/4kPq+lydKJeYlHug23Amk7djqGa860jau8ZyJ18qqFzEmPLuciUtMSv
2kzUP+579QN1tSM8nwDH5BoHohP0FwTaEnNQ5E5nFtRzt4P9+kQB7At+RaSYAPGI
f+F8R2DXNx/0OAoZNet/WV8EvNvbYEO/BE5gnBxUVmEos6QvU8dkBm0Hf85zxk0h
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615915443194852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Organization Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-05 07:51:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-06 07:51:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wiesbaden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ikanobank.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18618258927256146134247261712511803852452686766615715870103302569326188298495598284520504147405866044905778176814341716284298715836444470850739320093752557743312789994972767456708411239215971377326109394008946689683744567156068200990331690057513993986501723364102161785571822486462936127878876617965024735615771555500198536705192894099620409594803149678565645115970170587914313796977422875622359483873887437662583968751828032928935077527783565430189692147677444689923344630638811799090299944483964400972447847576115111172984953247879111932843595842481128316058613393349567662515396035876666425969501579295021270376907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d6d2aec66aba75136ab0269f1708fc4590b9a1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/orgv1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/OrganizationVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4db1730d9a9c64500a5e1b89741346d1e2c3007e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikanobank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikano-shoppingcard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikanobank.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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