Rabobank PKI
Repository
Repository
Rabobank is hosting a PKI infrastructure, and has been hosting several older PKI infrastructures in the past.
For each of the infrastructures we need to publish relevant technical details such as Certificate Authority (CA) names, Certificates, certificate lifetimes, and CRLs
Here we publish Certificates and CRLs from our current and previous PKI Hierarchies
Note that there are 3 concurrent implementations of PKI, in different environments:
This is the new PKI infrastructure built in Q3-Q4 2024, that will start issuing certificates in 2025.
It is meant as a single future solution to replace multiple previous "RI=Rabobank International / WRR" and "Rabobank NL" infrastructures.
Those were built in 2014 and 2009 (further below on this page), and are deprecated now.
| Environment: Production | Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| Rabobank Root CA 2024 | c151232ec5e52c85d0e5e2de3dd75dda6a344b05 | 15-nov-2024 | 15-nov-2044 | Cert | CRL |
| Rabobank Policy CA 01 2024 | 4e0f68d9c312566e335d187f052314b2ff7554dd | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Auth Issuing CA 01 2024 | c61b6fc77bc622a79b6fb5b8bf5e34a5328d3411 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Auth Issuing CA 02 2024 | 9f2980334daeff096d4bf8098311b40a536feaf3 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank TLS Issuing CA 01 2024 | b6ba6b03b0e3a0af522dd7262d4e3d2aca60ef31 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank TLS Issuing CA 02 2024 | 8e60e55966492822826f06e976d8800d38e3e15c | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank AutoEnroll Issuing CA 01 2024 | 342a528771b8f197f271d90db2f2dca317d972bc | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank AutoEnroll Issuing CA 02 2024 | b96f2acd86c899801b46879affdb726434fed006 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Ephemeral Issuing CA 01 2024 | 4dd1749c9e27d9fc0a38c652114178737f83a74e | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Ephemeral Issuing CA 02 2024 | 25f9e801aad543686fe71b4a8d7dff6905333445 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Specials Issuing CA 01 2024 | 115cce4bc1c0530ce958c1c7edf39fe26865df5c | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank Specials Issuing CA 02 2024 | 15537033938e6b8a8d2b58f1a068b13962eac1f7 | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
| Rabobank DMZ Issuing CA 01 2024 | c4469264673e7a9ab3695249121e5fdb17d5bb3a | 15-nov-2024 | 15-nov-2029 | Cert | CRL |
These are the PKI infrastructures that are current in end-2024 + beginning of 2025, that will still issue certificates until the new PKI (above) is fully operational.
| Former RNL / RGO PKI 2014 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| Rabobank Group Root CA 2014 | a44d35030005b5d02289a6925691ef18e3186f20 | 22-oct-2014 | 22-oct-2034 | Cert | CRL |
| Rabobank Intermediate CA 2014 01 | 38ba63e3e6fcb696f393d2a0d2f5abc292ce8586 | 2-mar-2020 | 2-mar-2027 | Cert | CRL kortKort=Short CRL langLang=Long |
| Rabobank Intermediate CA 2014 02 | 8bc907650212c66097761bab7bd4a6391234e9fa | 2-mar-2020 | 2-mar-2027 | Cert | CRL kortKort=Short CRL langLang=Long |
| Former RI / WRR PKI (SHA 256) 2014 - 2025 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| RI Corporate Root CA2 | 95b3ede18225c7311526130d21fde22fbabd55a6 | 12-sep-2014 | 12-sep-2034 | Cert | CRL | |||||
| RI Intranet Issuing CA2 01 |
Expand to view previous certificates from this CA
|
|||||||||
| RI Intranet Issuing CA2 02 |
Expand to view previous certificates from this CA
|
|||||||||
| Former RI / WRR PKI (SHA-1) 2009 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| RI Corporate Root CA | 4dd973e81d98918a55f1d9fbdb4e814a095c4ee2 | 20-apr-2009 | 20-apr-2025 | Cert | CRL |
| RI Intranet Issuing CA 01 | ea6baa016c1431fe7544a8b0f9a024e6470a56a4 | 28-apr-2009 | 28-apr-2014 | Cert | CRL |
| RI Intranet Issuing CA 01 (renewed with new key) |
0d304b42f753ac331c8047739b11d3f25bfcaccb | 2-mar-2012 | 2-mar-2017 | Cert | CRL |
| RI Intranet Issuing CA 02 | d8318705d8aab884836d56206167b39cee0c93fe | 28-apr-2009 | 28-apr-2014 | Cert | CRL |
| RI Intranet Issuing CA 02 (renewed with new key) |
de27a17e7d9a39b9bef7ca52a70b70c374c46ccc | 2-mar-2012 | 2-mar-2017 | Cert | CRL |
This is the new PKI infrastructure built in Q3-Q4 2024, that will start issuing certificates in 2025.
It is meant as a future solution to replace previous "RI=Rabobank International / WRR" infrastructure in DEV environment.
Those were built in 2014 and 2009 (further below on this page), and are deprecated now.
| Environment: Development / rabodev.com | Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| Rabobank Dev Root CA 2024 | b7048167d4b56fd35d37b2f1bbb0f77df28c1d33 | 8-nov-2024 | 8-nov-2044 | Cert | CRL |
| Rabobank Dev Auth Issuing CA 01 2024 | 290ac7f1358e397e99fb0a1cd37fb8410bd2e1b9 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev Auth Issuing CA 02 2024 | 526569db17445ca5c5bae4b07631452a90820a40 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev TLS Issuing CA 01 2024 | bbc2532e22e03990a733982b0242e58e3345573a | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev TLS Issuing CA 02 2024 | 68ecd2574d7f58e60712a986124f10599108ef20 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev AutoEnroll Issuing CA 01 2024 | d2a5ff50aa2958c0aa86025c84e472cf7fc71814 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev AutoEnroll Issuing CA 02 2024 | 4660fc7563d682acd517d0ffac1cf23dbf095676 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev Specials Issuing CA 01 2024 | 1bb6b702852660c93668f6677849055ab63bc331 | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
| Rabobank Dev Specials Issuing CA 02 2024 | 02e087dd67ac5ce8655beefd19c95ed274fce18d | 8-nov-2024 | 8-nov-2029 | Cert | CRL |
These are the PKI infrastructures that are current in end-2024 + beginning of 2025, that will still issue certificates until the new PKI (above) is fully operational.
| Former RI / WRR PKI (SHA 256) 2014 - 2025 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| RI Corporate Root CA2 (DEV) | 8d5907832c0c4c8d1bcce00a686a1ea7f6974bca | 12-sep-2014 | 12-sep-2034 | Cert | CRL | |||||
| RI Intranet Issuing CA2 01 |
Expand to view previous certificates from this CA
|
|||||||||
| RI Intranet Issuing CA2 02 |
Expand to view previous certificates from this CA
|
|||||||||
| Former RI / WRR PKI (SHA-1) 2009 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| RI Corporate Root CA (Dev) | 32be0bb61fa708eb44209c6408c1f68535c7fbdd | 20-apr-2009 | 20-apr-2025 | Cert | CRL |
| RI Intranet Issuing CA 01 (renewed with new key) |
4a65189755a99859f78f6a7cc4ec08db962f15aa | 2-mar-2012 | 2-mar-2017 | Cert | CRL |
| RI Intranet Issuing CA 01 | 8839217314c081d103e87d1ff1b3ccf26b67e850 | 27-apr-2009 | 27-apr-2014 | Cert | CRL |
| RI Intranet Issuing CA 02 | 62885581f3ab2e843ff53d64f721fe0fcf092ece | 6-dec-2012 | 6-dec-2017 | Cert | CRL |
This is the new PKI infrastructure built in Q3-Q4 2024, that will start issuing certificates in 2025.
It is meant as a future solution to replace previous "RI=Rabobank International / WRR" infrastructure in testlab.
Those were built in 2014 and 2009 (further below on this page), and are deprecated now.
| Environment: Test / testlab / rabotest.com | Certificate Thumbprint | From | To | Cert | CRL |
|---|---|---|---|---|---|
| Rabobank Test Root CA 2024 | eeade1f93f52ea7d52674f7925e6c8fc5a845271 | 9-oct-2024 | 9-oct-2044 | Cert | CRL |
| Rabobank Test Policy CA 01 2024 | 24d98ae2cf8d6c1b6790a45029af3e6cdce850ab | 9-oct-2024 | 9-oct-2029 | Cert | CRL |
| ZScaler ... tbd ... | aaaaaaaaaaaaaaaaaaaaaaaaaak(tbd) | 00-jan-2000 | 00-jan-2000 | Cert | CRL |
| PaloAlto ... tbd ... | aaaaaaaaaaaaaaaaaaaaaaaaak(tbd) | 00-jan-2000 | 00-jan-2000 | Cert | CRL |
| Rabobank Test Auth Issuing CA 01 2024 | 8df0bd6b79abde97208526850c006de469ac15cb | 9-oct-2024 | 9-oct-2029 | Cert | CRL |
| Rabobank Test Auth Issuing CA 02 2024 | fe7500d9476505069bfd9244dc35ab9f7e9ed9ae | 9-oct-2024 | 9-oct-2029 | Cert | CRL |
| Rabobank Test TLS Issuing CA 01 2024 | 919500ab7d80584333085d1b31413291d11d4417 | 9-oct-2024 | 9-oct-2024 | Cert | CRL |
| Rabobank Test TLS Issuing CA 02 2024 | ba7b210a589f530460cb5b0a34fd46c0dbfca69d | 9-oct-2024 | 9-oct-2024 | Cert | CRL |
| Rabobank Test AutoEnroll Issuing CA 01 2024 | 60586ebf3d8e687ec439592b327f1d4d01bc1833 | 9-oct-2024 | 9-oct-2029 | Cert | CRL |
| Rabobank Test AutoEnroll Issuing CA 02 2024 | c6479eac079a22f317ee4af79f5d75e192087cda | 9-oct-2024 | 9-oct-2029 | Cert | CRL |
| Rabobank Test Specials Issuing CA 01 2024 | 6dbab3027162c3d346d947c25a71e5cb853139e0 | 9-oct-2024 | 9-oct-2024 | Cert | CRL |
| Rabobank Test Ephemeral Issuing CA 01 2024 | 0b4a7b96128594a51a9c2b70a6cdf8f25efcf15d | 9-oct-2024 | 9-oct-2024 | Cert | CRL |
| Rabobank Test DMZ Issuing CA 01 2024 | 748531195920359f69620c7235b2ee2555fa9946 | 9-oct-2024 | 9-oct-2024 | Cert | CRL |
These are the PKI infrastructures that are current in end-2024 + beginning of 2025, that will still issue certificates until the new PKI (above) is fully operational.
| Former RI / WRR PKI (SHA 256) 2014 - 2025 infrastructure |
Certificate Thumbprint | From | To | Cert | CRL | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| RI Corporate Root CA2 (Test) | e543aba7509b7e44d17998da4f3b73c4147ed240 | 5-feb-2014 | 5-feb-2034 | Cert | CRL | |||||
| RI Intranet Issuing CA2 01 |
Expand to view previous certificates from this CA
|
|||||||||
| RI Intranet Issuing CA2 02 |
Expand to view previous certificates from this CA
|
|||||||||