business.vb-rb.de

- meine Volksbank Raiffeisenbank eG -

Issued by QuoVadis Europe EV SSL CA G1

About this certificate

This digital certificate with serial number 25:99:ce:ee:48:d4:ca:47:f7:7b:50:16:6f:1b:55:8e:b3:7b:07:c8 was issued on by QuoVadis Trustlink B.V..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

meine Volksbank Raiffeisenbank eG

Company registration number: GnR 153
Organization: meine Volksbank Raiffeisenbank eG
State / Province: Bayern
Locality: Rosenheim
Country: DE

QuoVadis Trustlink B.V.

Organization: QuoVadis Trustlink B.V.
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 25:99:ce:ee:48:d4:ca:47:f7:7b:50:16:6f:1b:55:8e:b3:7b:07:c8
Serial Number (int): 214662698750771802910499473142048667423357994952
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: dc:a0:16:78:7e:76:03:ef:78:f2:aa:ff:07:4e:5a:fd:a7:96:f4:ac
AuthorityKeyId: 49:3d:0e:dc:79:c5:cb:db:12:a3:d5:0d:ab:f2:cf:a9:af:e3:66:a9

Fingerprint (sha1): 8a:f7:12:be:58:30:65:e8:ff:e6:ca:97:09:96:17:88:f8:dd:c0:81
Fingerprint (sha256): f3:27:13:18:9e:44:d0:7b:e1:dd:c3:8f:88:c7:d0:d7:7a:50:67:0e:13:5f:f7:09:5a:7a:99:bb:97:de:f1:7c

Issuing Certificate URL: http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl

Check the revocation status for certificate business.vb-rb.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for business.vb-rb.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

business.vb-rb.de

Other certificates including the domain name vb-rb.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for business.vb-rb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysO6PMTPaoBkaRVG1LPL
Ro+w/tCWNK67j3sebaYM3pPEX0Y8iblaaDKsdZ+JmVX8sXOX5HwxsvbZgUqKfge5
Uaorj4++YNHr/rWyqftiW23uYwji5bhHRQoN1E43OxkAikCugbh2nW/eE/KV9gpT
Xge0lzYtVVPjfd75cc1PLu1uveAtvmvEdJio8PZ4A48jocHh7XRbpauJ4seUdDvQ
ZmMOXm+Frx6Skhd/1BAoIRp8afHlKTNJ+ImInTvNfi9xLIWF1lgjJG0oZZ3iUOQm
XntMpE9hG2woMBFw+1lEEBU2mkFOtwadO+q5meJSgdizX0NvDKzb6p/JC4rUVx/4
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 214662698750771802910499473142048667423357994952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Trustlink B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QuoVadis Europe EV SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 12:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 12:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Traunstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GnR 153'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rosenheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'meine Volksbank Raiffeisenbank eG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'business.vb-rb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25596654425574818526142414800202601980189013717479660013508824996381376910291921749422820273072009381078864247775278396092623971859478053188684851604464973838387489215246349446692160155352824329945279790267098999523090920836373310752681954066593737260529302040969502715210912397950277146984274324362343677327069344368652602880975858392763251285099306176296905099328265680636128628122408830334508274196803324678456445886305836543702878016536504138417667102773513709719779771180516812654894923069826111291507642771297309271459668581767356741167596300052122001220769908466555561366829681799182716926911877492009634625589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 493d0edc79c5cbdb12a3d50dabf2cfa9afe366a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/quovadiseuropeevsslcag1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.vb-rb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/quovadiseuropeevsslcag1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dca016787e7603ef78f2aaff074e5afda796f4ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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