atruvia.de

- Atruvia AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 30:9c:b7:ce:aa:00:66:53:67:c1:5f:5a:06:1c:c0:fc:07:86:67:36 was issued on by QuoVadis Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 30:9c:b7:ce:aa:00:66:53:67:c1:5f:5a:06:1c:c0:fc:07:86:67:36
Serial Number (int): 277526485122979006908993772341832211945071470390
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 1f:63:c7:3b:ca:21:61:d1:8c:af:bf:6f:25:bc:7c:2a:db:5e:93:35
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 83:80:32:01:47:ce:57:1e:90:6d:52:14:61:7d:d9:c5:48:ed:34:56
Fingerprint (sha256): ba:4a:b1:9b:50:07:4a:21:40:b1:4a:6e:ff:77:3d:5c:26:d3:e1:ba:78:91:2f:fd:29:b8:ba:8a:0c:12:f1:74

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate atruvia.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atruvia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atruvia.de
design-system.atruvia.de
gb2021.atruvia.de
www.atruvia.de

Other certificates including the domain name atruvia.de

(limited to 100 certificates)
fints-test.atruvia.de
atruvia.de
fiduciagad.de
paydirekt-ms.atruvia.de
agree21itsm.atruvia.de
webdav-uit-a.fiducia.de
test1333.atruvia.de
atruvia.de
fints1.atruvia.de
vpnb-inte.atruvia.de
karriere.atruvia.de
vpnc.atruvia.de
vpnb-ms.fiduciagad.de
KA-E.VPNB.ATRUVIA.DE
vpnb-ka.atruvia.de
test1333.atruvia.de
awbt.atruvia.de
matomo.atruvia.de
vpnc.atruvia.de
agree21mdm.atruvia.de
api-test.atruvia.de
KA-E.VPNB.ATRUVIA.DE
test1333.atruvia.de
ckm20230620dt.atruvia.de
paydirekt.atruvia.de
citrix-t.uit.fiducia.de
agree21itsm.atruvia.de
api-test.atruvia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
citrix-t.uit.fiducia.de
vpns-inte.atruvia.de
vrnetworldsoftware-inte.atruvia.de
citrix-t.uit.fiducia.de
digitale-privatbank.atruvia.de
citrix-p.uit.fiducia.de
datenservice.atruvia.de
besuchermanagement-test.atruvia.de
citrix-t.uit.fiducia.de
lp.atruvia.de
geno-dfin-inte.fiduciagad.de
shop-qas.scc.atruvia.de
besuchermanagement-test.atruvia.de
api-test.atruvia.de
test1333.atruvia.de
atruvia.de
datenservice-test.atruvia.de
fiduciagad.de
*.hub-satu.atruvia.de
*.hub-witu.atruvia.de
uit-abnahme-sharepoint.fiducia.de
citrix-t.uit.fiducia.de
fints2.atruvia.de
atruvia.de
vpns.fiduciagad.de
p2.giroapi.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
integrationsplattform-01.atruvia.de
vpnc-inte.atruvia.de
shop-dev.scc.atruvia.de
awbt-inte.atruvia.de
citrix-a.uit.fiducia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
atruvia.de
paydirekt-ms.atruvia.de
fiduciagad.de
p1.giroapi.atruvia.de
lightsout.atruvia.de
uit-sharepoint.fiducia.de
shop.scc.atruvia.de
*.hub-satu.atruvia.de
integrationsplattform-02.atruvia.de
*.hub-demo.atruvia.de

Certificate

The complete raw certificate details for atruvia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprmWrJGMLkcLvNe2dZi6
C7U9PGggTZkPEgY9hACgfzx6dyeF1nnNmigtQ3UrrA8A56kgbP6yPszAOAjeWJfm
maIeH0JBK9vwLDKWd9wAlWq0A4lCzAiDXXAOo1sLIzXUf4X1/6FeV7XiwGllW8DE
g01ykZ4CwR2Q3PvwirYE9ofMZnIYwW4/GaObKAuzPEwpQSwi3wDYp9gPHY2Thbkz
YI8hiifHELjzL3mHgWgyKkrD6gmqpUcUWYnnFAuFEHGtZL9bi4IGZQld3NQwzPOY
0E2ksgYstNnWh0oeColSMqcpyGX6phcw3rk6op4SvZLlqGhNYB2/PbcXkvcMyksP
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277526485122979006908993772341832211945071470390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-18 05:43:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 05:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'atruvia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21047075759461841841036935401169674470142067464824299718024594241238157735466891121010200325579067953569049051857399995627932520515280531232686175561183533364198515846438064460384708973853871551356213912806836947527221144100102344256053467497518157690403576203594958687446450572644037462067929303880844208393457770338241586913610831471098444727167737287962180850734329969585509622999829089304025927985397156495110684550070938814156465697059897433636420898101219295933763902144723058903602563431067230829175474616782849466762666319684345702901929815732455871941242096066372996024057303110248045815017469299442982785011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-system.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb2021.atruvia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atruvia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f63c73bca2161d18cafbf6f25bc7c2adb5e9335
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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