atruvia.de

- Atruvia AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 68:8d:95:1d:af:43:be:34:c9:9a:d5:8b:c7:12:a8:22:97:d0:7d:6d was issued on by QuoVadis Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atruvia AG

Organization: Atruvia AG
State / Province: Baden-Württemberg
Locality: Karlsruhe
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 68:8d:95:1d:af:43:be:34:c9:9a:d5:8b:c7:12:a8:22:97:d0:7d:6d
Serial Number (int): 596892435070431242359134212727540774056951315821
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 1f:63:c7:3b:ca:21:61:d1:8c:af:bf:6f:25:bc:7c:2a:db:5e:93:35
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 54:f0:aa:2e:4d:c6:c5:6f:99:25:97:9f:25:e9:29:03:1d:ac:ee:2f
Fingerprint (sha256): e7:3a:8c:f5:9c:b3:7c:01:82:ac:05:df:34:77:10:17:4a:40:a7:49:ef:4a:cb:e8:b1:2c:8c:e5:26:d2:35:13

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate atruvia.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atruvia.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atruvia.de

Other certificates including the domain name atruvia.de

(limited to 100 certificates)
fints-test.atruvia.de
atruvia.de
fiduciagad.de
paydirekt-ms.atruvia.de
agree21itsm.atruvia.de
webdav-uit-a.fiducia.de
test1333.atruvia.de
atruvia.de
fints1.atruvia.de
vpnb-inte.atruvia.de
karriere.atruvia.de
vpnc.atruvia.de
vpnb-ms.fiduciagad.de
KA-E.VPNB.ATRUVIA.DE
vpnb-ka.atruvia.de
test1333.atruvia.de
awbt.atruvia.de
matomo.atruvia.de
vpnc.atruvia.de
agree21mdm.atruvia.de
api-test.atruvia.de
KA-E.VPNB.ATRUVIA.DE
test1333.atruvia.de
ckm20230620dt.atruvia.de
paydirekt.atruvia.de
citrix-t.uit.fiducia.de
agree21itsm.atruvia.de
api-test.atruvia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
citrix-t.uit.fiducia.de
vpns-inte.atruvia.de
vrnetworldsoftware-inte.atruvia.de
citrix-t.uit.fiducia.de
digitale-privatbank.atruvia.de
citrix-p.uit.fiducia.de
datenservice.atruvia.de
besuchermanagement-test.atruvia.de
citrix-t.uit.fiducia.de
lp.atruvia.de
geno-dfin-inte.fiduciagad.de
shop-qas.scc.atruvia.de
besuchermanagement-test.atruvia.de
api-test.atruvia.de
test1333.atruvia.de
atruvia.de
datenservice-test.atruvia.de
fiduciagad.de
*.hub-satu.atruvia.de
*.hub-witu.atruvia.de
uit-abnahme-sharepoint.fiducia.de
citrix-t.uit.fiducia.de
fints2.atruvia.de
atruvia.de
vpns.fiduciagad.de
p2.giroapi.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
integrationsplattform-01.atruvia.de
vpnc-inte.atruvia.de
shop-dev.scc.atruvia.de
awbt-inte.atruvia.de
citrix-a.uit.fiducia.de
besuchermanagement.atruvia.de
api-test.atruvia.de
vrnetworldsoftware.atruvia.de
proficash-updates.atruvia.de
atruvia.de
paydirekt-ms.atruvia.de
fiduciagad.de
p1.giroapi.atruvia.de
lightsout.atruvia.de
uit-sharepoint.fiducia.de
shop.scc.atruvia.de
*.hub-satu.atruvia.de
integrationsplattform-02.atruvia.de
*.hub-demo.atruvia.de

Certificate

The complete raw certificate details for atruvia.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprmWrJGMLkcLvNe2dZi6
C7U9PGggTZkPEgY9hACgfzx6dyeF1nnNmigtQ3UrrA8A56kgbP6yPszAOAjeWJfm
maIeH0JBK9vwLDKWd9wAlWq0A4lCzAiDXXAOo1sLIzXUf4X1/6FeV7XiwGllW8DE
g01ykZ4CwR2Q3PvwirYE9ofMZnIYwW4/GaObKAuzPEwpQSwi3wDYp9gPHY2Thbkz
YI8hiifHELjzL3mHgWgyKkrD6gmqpUcUWYnnFAuFEHGtZL9bi4IGZQld3NQwzPOY
0E2ksgYstNnWh0oeColSMqcpyGX6phcw3rk6op4SvZLlqGhNYB2/PbcXkvcMyksP
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 596892435070431242359134212727540774056951315821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 06:09:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 06:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atruvia AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'atruvia.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21047075759461841841036935401169674470142067464824299718024594241238157735466891121010200325579067953569049051857399995627932520515280531232686175561183533364198515846438064460384708973853871551356213912806836947527221144100102344256053467497518157690403576203594958687446450572644037462067929303880844208393457770338241586913610831471098444727167737287962180850734329969585509622999829089304025927985397156495110684550070938814156465697059897433636420898101219295933763902144723058903602563431067230829175474616782849466762666319684345702901929815732455871941242096066372996024057303110248045815017469299442982785011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atruvia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f63c73bca2161d18cafbf6f25bc7c2adb5e9335
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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