Secure data exchange.

To ensure maximum security, we renew our certificates every 200 days. Since the new certificate files are typically exchanged digitally, there is theoretically a minimal risk that data could be intercepted or tampered with—a scenario known as a man-in-the-middle attack. This transparency page serves as your central reference source: Here you can check at any time whether the file you received from us is unaltered and in its original state.

How to verify the certificate you received

Open the certificate:
Open the certificate file you received from us on your system or view the details in the certificate store.

Determine the thumbprint:

• SHA-1 check (minimum standard)
  Look for the “Thumbprint” attribute in the certificate details.
• SHA-256 check (recommended)
  Generate the SHA-256 hash directly from the certificate file. To do this, use one of the following commands depending on your environment:
  • PowerShell (Windows): > ```powershell Get-FileHash -Path .\certificate.cer -Algorithm SHA256
  • OpenSSL (Linux/Unix): > ```bash openssl x509 -noout -fingerprint -sha256 -in certificate.crt

Verification:
Compare the determined value with the corresponding entry in the table below.

Security confirmed:
If the strings match exactly, the certificate is genuine and can be safely installed.

Security Note:
If the values do not match, please do not install the certificate and contact our support team immediately.

The SHA-1 fingerprint provides basic identification and is preferable to unencrypted methods. However, due to known security vulnerabilities, it no longer represents the current state of the art. For a cryptographically reliable verification, we recommend switching to SHA-256.