blog.onemarkets.de
- UniCredit Bank AG -
Issued by UniCredit Subordinate External
About this certificate
This digital certificate with serial number 1a:57:ef:61:00:00:00:00:04:bd was issued on by UniCredit S.p.A..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
- Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
UniCredit Bank AG
Organization:
UniCredit Bank AG
Organization unit: US92068
Organization unit: US92068
State / Province:
Bayern
Locality: Muenchen
Country: DE
Locality: Muenchen
Country: DE
UniCredit S.p.A.
Organization:
UniCredit S.p.A.
Country:
IT
This certificate has expire since
Certificate Details
Serial Number (hex): 1a:57:ef:61:00:00:00:00:04:bdSerial Number (int): 124403644357071312258237
Serial Number lenght: 77 bits, 10 octets
SubjectKeyId: dc:c5:95:68:e0:63:4b:36:da:3c:00:82:fe:56:5e:c6:81:a3:1a:92
AuthorityKeyId: f0:56:4f:75:77:1e:74:76:35:d3:40:14:a0:12:e6:0d:5d:f5:3e:27
Fingerprint (sha1): d1:a3:84:b2:1b:9b:df:c8:73:82:7b:2b:37:b9:30:cc:f9:35:b2:0b
Fingerprint (sha256): c7:d9:11:0b:df:1e:97:c5:d7:7c:ef:79:43:42:76:4d:21:f0:63:cd:b9:f4:f7:58:25:0f:ca:62:9a:c2:a4:c1
Issuing Certificate URL: http://ca.unicredit.eu/CRT/extca.crt
Revocation information
CRL Distribution Point: http://ca.unicredit.eu/CRL/extca.crlCheck the revocation status for certificate blog.onemarkets.de
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.onemarkets.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name onemarkets.de
(limited to 100 certificates)
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
*.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
data.onemarkets.de
*.onemarkets.de
www.onemarkets.de
data.onemarkets.de
*.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
www.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
www.onemarkets.de
*.onemarkets.de
www.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
data.onemarkets.de
www.onemarkets.de
data.onemarkets.de
blog.onemarkets.de
push2.onemarkets.de
tradingdesk.onemarkets.de
blog.onemarkets.de
onemarkets.eu
push2.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
*.onemarkets.de
tradingdesk.onemarkets.de
push2.onemarkets.de
data.onemarkets.de
www.onemarkets.de
blog.onemarkets.de
tradingdesk.onemarkets.de
Certificate
The complete raw certificate details for blog.onemarkets.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjjCCA3agAwIBAgIKGlfvYQAAAAAEvTANBgkqhkiG9w0BAQsFADBRMQswCQYD VQQGEwJJVDEZMBcGA1UEChMQVW5pQ3JlZGl0IFMucC5BLjEnMCUGA1UEAxMeVW5p Q3JlZGl0IFN1Ym9yZGluYXRlIEV4dGVybmFsMB4XDTE0MDQxNjA4NTM0MloXDTE1 MDQxNjA4NTM0MlowfDELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJheWVybjERMA8G A1UEBxMITXVlbmNoZW4xGjAYBgNVBAoTEVVuaUNyZWRpdCBCYW5rIEFHMRAwDgYD VQQLEwdVUzkyMDY4MRswGQYDVQQDExJibG9nLm9uZW1hcmtldHMuZGUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurfx5D9mf/lWq70QOm8pjSBrpg1aY CC7gN/zhjDnalnbeuASN30E4g2IOIZCfnK1NbkCwRDHZfN7YFbpj/LbvEynHzDE6 YLWMq9ml45RqQ8MIng5U2nHz22LnWk+S/06xJXQ6RZVuszf19M8Y4me/AA/vxTHD /ysy/Wgqv5qgEBDP7LEh4EhqLGkbwwORyqU10mG1vP6yaMRg3Jmk1cL3d5WCBcHO SgSmnk4Dq9He73o6H1Q0ElP+LTRUttkhlTuPAijXUn8/4Sij1doB4IjCPXtqZs5Z j3PlcslmxFOWglz/Tu3oOiC+4DfQjV9To/R3XVPohuij6GSn6GkCQ2lBAgMBAAGj ggE7MIIBNzAdBgNVHQ4EFgQU3MWVaOBjSzbaPACC/lZexoGjGpIwHwYDVR0jBBgw FoAU8FZPdXcedHY100AUoBLmDV31PicwNQYDVR0fBC4wLDAqoCigJoYkaHR0cDov L2NhLnVuaWNyZWRpdC5ldS9DUkwvZXh0Y2EuY3JsMEAGCCsGAQUFBwEBBDQwMjAw BggrBgEFBQcwAoYkaHR0cDovL2NhLnVuaWNyZWRpdC5ldS9DUlQvZXh0Y2EuY3J0 MAsGA1UdDwQEAwIFoDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQjDtieBo/h1 hvmfIIXtozWGkehpgSqE1bUMgeW8dQIBZAIBCTATBgNVHSUEDDAKBggrBgEFBQcD ATAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IB AQC22SS10JyTbHSsa3NHiP53zH/ja6BguU17ZG87i2U3n1snmn6EW4+gj51Jb2Ju UXZTQ7SVFI5nbO3aNpfhlN/YA7puvh11TDOS4TxPBbso1EpsFtzoks0YmWNF+bGE 95F/uCyM43qCSlb0q2qjF9S69u0FSbpqTfbatQrWJO1x6dxPc7HNE7i277XB4rCy esSo3nhE7OqGD6p6iNuWlbK7Lh75e5gL0KTqUitU0RiJkzsyVFQfdrr4MqHoIeB3 MXIkOGfgM1eoEWOVVW8bnkfpI15gfVEXa/2PH9GvI0WprZJuxQh/+Gz3zSqSulyZ coqNGlkrCQ84OuLc4pL/a/FM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq38eQ/Zn/5Vqu9EDpvK Y0ga6YNWmAgu4Df84Yw52pZ23rgEjd9BOINiDiGQn5ytTW5AsEQx2Xze2BW6Y/y2 7xMpx8wxOmC1jKvZpeOUakPDCJ4OVNpx89ti51pPkv9OsSV0OkWVbrM39fTPGOJn vwAP78Uxw/8rMv1oKr+aoBAQz+yxIeBIaixpG8MDkcqlNdJhtbz+smjEYNyZpNXC 93eVggXBzkoEpp5OA6vR3u96Oh9UNBJT/i00VLbZIZU7jwIo11J/P+Eoo9XaAeCI wj17ambOWY9z5XLJZsRTloJc/07t6DogvuA30I1fU6P0d11T6Iboo+hkp+hpAkNp QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 124403644357071312258237 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Subordinate External' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-16 08:53:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-16 08:53:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UniCredit Bank AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US92068' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.onemarkets.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22051260867943126554784300045124363431644103305595132412051350270575032161671601544803017399118587004203732789861038308302189892765003012184374183226127696726294308554030894307177871434916673070765200499336288827907180908762014141987940654620094377997377517333059726114287996641579187810861018540992697099140641520649678929724316277691138156506695725340595071282886714152302233671737322999706072942304143900814118001739662529216105356030012870010658235631300602461982739107929720935517734749180717562292781542124791833664226244563238820434865478879794499463887476555689711277889095410389050723267309946746334808860993 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dcc59568e0634b36da3c0082fe565ec681a31a92 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f0564f75771e747635d34014a012e60d5df53e27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRL/extca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.unicredit.eu/CRT/extca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1104679.2686069.14569376.12276149.12874857.170.9788044.3759733 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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