investment-dialog.de

- DZ BANK AG - Deutsche Zentral-Genossenschaftsbank -

Issued by Shared Business CA 3

About this certificate

This digital certificate with serial number 5c:ec:00:64:43:22:3d:87 was issued on by T-Systems International GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • If certificate policy 2.23.140.1.2.2 is included, localityName or stateOrProvinceName MUST be included in subject (BRs: 7.1.6.4)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

DZ BANK AG - Deutsche Zentral-Genossenschaftsbank

Organization: DZ BANK AG - Deutsche Zentral-Genossenschaftsbank
Organization unit: vrnetze.de
Organization unit: VRN-FFM
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:ec:00:64:43:22:3d:87
Serial Number (int): 6695727176616131975
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 28:ef:b1:fb:18:f7:ca:89:cd:c4:84:70:66:10:15:dd:d6:ef:a6:10
AuthorityKeyId: 92:01:43:40:b5:d8:a1:14:8b:da:fb:d9:f1:20:9f:58:08:c2:7a:d3

Fingerprint (sha1): 77:9c:40:8c:02:7a:05:19:08:a0:cb:1f:b3:61:85:4a:01:d2:3b:53
Fingerprint (sha256): db:ef:5c:2c:49:ee:43:ba:7f:1b:4a:ef:c7:1a:02:5f:a0:bc:4d:54:b7:15:e1:08:ba:d4:3e:d6:1b:f0:c8:12


Revocation information

OCSP Server: http://ocsp03.sbca.telesec.de/ocspr
CRL Distribution Point: http://crl.sbca.telesec.de/rl/Shared_Business_CA_3.crl
CRL Distribution Point: ldap://ldap.sbca.telesec.de/CN=Shared%20Business%20CA%203,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList

Check the revocation status for certificate investment-dialog.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investment-dialog.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

investment-dialog.de
www.investment-dialog.de

Other certificates including the domain name investment-dialog.de

(limited to 100 certificates)
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
investment-dialog.de
www.investment-dialog.de

Certificate

The complete raw certificate details for investment-dialog.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjl3PO4U7Uz2NM1d8NZ0
fZeAoMb3/RW4HlOSdrj+9kSwjSsMGFvrc3ExgpUR0cYJ48OsQHGXiM3qeuiGfnbQ
mjaZyLd31j5ae+v2xQnWXBxLLo2palMTzsXFTAPTbts1SASegtZhBMyaJP1WtD1E
ufpOJRqrG7Fa9pQeDtSdl3GSUl2yVzaWjuPipxItjK+aZ38XcQKtG9hIBOj9UPdI
vJ3FLw1QpTo8v0woJQnq6hzt03rwpb9iymE7fncba28QSv7bYarCIOGYBW9l476l
6YEM+cQEntmrXxOcaSPL7dyNnTTR8Jgg+QEdzz14e9mCvskVNQrF/+2l2sI2VQNT
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6695727176616131975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shared Business CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-21 06:54:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DZ BANK AG - Deutsche Zentral-Genossenschaftsbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vrnetze.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VRN-FFM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investment-dialog.de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21488849273277540708415132339586642330362666406424448391991271751407680684787377097730863554486007752545744400503828618069834758367975898956076213271250867929190092166021851518337331231325111883206230904650209839502597970660526443968404711190562739009373415531154319215217811821494426219827015722002507879574680774351565956345330021878316736525603591629126458181624746957444036942802870129161875333694908326389393686822249614166084607045619403397446245309370541874158337084775446222141653415202434211150242860569939645607780449104260460293892649666134283730652325430915544302145214919609481872896853740864308599018467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92014340b5d8a1148bdafbd9f1209f5808c27ad3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28efb1fb18f7ca89cdc48470661015ddd6efa610
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.25
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://sbca.telesec.de/download/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sbca.telesec.de/rl/Shared_Business_CA_3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.sbca.telesec.de/CN=Shared%20Business%20CA%203,OU=T-Systems%20Trust%20Center,O=T-Systems%20International%20GmbH,C=DE?CertificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp03.sbca.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-dialog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investment-dialog.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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