EV SSL/TLS Certificate for webkim.de Issued to akf bank GmbH & Co KG

Certificate is witin its validity period

Issued by SwissSign AG (SwissSign RSA TLS EV ICA 2022 - 1)

About the webkim.de EV SSL/TLS Certificate

This certificate with serial number 63:dd:49:71:74:aa:db:db:dc:57:cb:2e:84:cd:07:09:df:db:3e:ea for webkim.de was issued on by SwissSign AG.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This EV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this EV SSL/TLS Certificate review for webkim.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SwissSign AG

Organization: SwissSign AG
Country: CH

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 63:dd:49:71:74:aa:db:db:dc:57:cb:2e:84:cd:07:09:df:db:3e:ea
Serial Number (int): 570124948804293458421277003045172217685670051562
Serial Number Length: 159 bits, 20 octets

Subject Key Identifier: 97:62:f4:88:6a:d8:07:75:fd:1f:09:9d:f0:a3:a5:5b:da:f0:d7:45
Authority Key Identifier: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (SHA-1): 88:4b:7f:ef:3d:c9:28:ef:49:1c:1c:b3:b2:7a:de:59:fe:a1:44:ac
Fingerprint (SHA-256): da:4d:6f:1e:8b:e4:3f:68:ba:6e:6c:60:f8:28:53:c2:21:54:43:78:f4:33:e1:eb:77:3c:09:ed:a8:94:5f:b5

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation Information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate webkim.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for webkim.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for webkim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvvB9f1Tdg3z7lOabPHSB
8y0o5UhgCuAjQ2ktdbmXX96iMcTboF6Gx97BWLFLx3LIIbbFjCZ2fTlPz/6GKngt
C/fUM5qiNpPm8+1WHLvIwLLfVZTOt6WLQ/v2PG8IbzUhvaQhh4pwB18C3KDDW6Fj
hdCFv4RfAdcaPm2wxfxJB9Ik3MTdkmdKcUE7W1jb6Vq0C+kLbcDbOO86P76qrhCe
cJQoyTFZ+FjfPL2pjEfj1zmVo8ga5mJUzW3mEGCaZZlCKKsZ+wWwzsFdbBSdk9ZO
+fDraZgWl8fJIBR05+j/MYzR5bVG7xouKZvmSEUkR2weXeB0AqPKY6ASWrJhUWPE
96oBDzn87zFtKKxBeGI54zRG1UW3W77tpWDw4Qq9ZTRJUw7TcgbTjLuMJ29u/jdy
xJPKIqd8vo7vgwE/tZuKqtWWGJdxXz2A1SiNc6Z0uoW6djntiaHtnSFUBA6HJ5nD
IMmGOxPs7cyKRO92Jvifm1RritnfM9QUrQgE5AFMBcpdFnCfE3CPHpfDC9DuUJUI
YLJc9Q8DSPNajSkwEIaNZExWv9kHajfqB1fSb+ZIiJvW+rEFFa1jD+U4lHNID/7r
Ohnrhm55QArDlniYM9OlbVBeGvdPcp2zPYrc+nlIgmMqRdrLD5S+pypnWFNV7wZ5
Q/H24p1YusI89ZdYHjjExdcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 570124948804293458421277003045172217685670051562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-19 12:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-12-19 12:25:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '42277'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Am Diek 50'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'akf bank GmbH & Co KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 15563'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webkim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778964851503787565794785608748486922290590555992312719418003864455722194205627694899619033258825700813522371515015462537435839130204432735971278071135216835479793587784890854455393094505704245873318785835880454144974313722970376490490401909361061366048929522117547490599495414864421781987603049053564259232755989549921604601403744589020269660491601150641779734205275148156807681386046568815566966744144905713693291622455165023011703032682362524804021794910741423847423299522814524306034422858235823981010543289669976976091983701870415011525302031311126736162690330238258137376236250009899056497928299445971154987924988172986603764620114951768514830358877678722281821774253374376698556927202434338755493808259918836141367820810262058899836409722244600304574612144352001669939757045528090416419964229665124236531343746279363620801306791738635642071625953571710295183530791642852414478103212557774067560144664059403415157905541702632019214165656541512090483484872462823012681181299629827276342606671531970506273546975257919385239518616319119598146234565861332128375906883133941852330468430948151559270416084146679037922306315664863696703489679134358715274382721676590043245960255918503127093392943939141721033561009110979137023886280151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webkim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webkim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9762f4886ad80775fd1f099df0a3a55bdaf0d745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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