Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0
BSI-DSZ-CC-1044-V9-2026 		secunet konnektor 2.0.0 und 2.1.0, Version 5.70.4:2.0.0 und 5.70.4:2.1.0
BSI-DSZ-CC-1044-V8-2025
name secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0 secunet konnektor 2.0.0 und 2.1.0, Version 5.70.4:2.0.0 und 5.70.4:2.1.0
not_valid_after 23.02.2031 09.06.2030
not_valid_before 24.02.2026 10.06.2025
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V9c_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V8c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V9a_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V8a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V9b_pdf.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1044V8b_pdf.pdf
security_level ADV_FSP.4, ADV_TDS.3, ALC_TAT.1, ALC_FLR.2, ADV_IMP.1, AVA_VAN.3, EAL3+ ADV_FSP.4, ADV_TDS.3, ALC_TAT.1, ALC_FLR.2, EAL3, ADV_IMP.1, AVA_VAN.5
heuristics/cert_id BSI-DSZ-CC-1044-V9-2026 BSI-DSZ-CC-1044-V8-2025
heuristics/extracted_sars AVA_VAN.3, ADV_IMP.1, AGD_OPE.1, ALC_FLR.2, ADV_FSP.4, AGD_PRE.1, ALC_TAT.1, ATE_DPT.1, ALC_DEL.1, ADV_ARC.1, ALC_CMS.4, ADV_TDS.3 ADV_IMP.1, AVA_VAN.5, AGD_OPE.1, ALC_FLR.2, ADV_FSP.4, AGD_PRE.1, ALC_TAT.1, ATE_DPT.1, ALC_DEL.1, ADV_ARC.1, ALC_CMS.4, ADV_TDS.3
heuristics/extracted_versions 6.0.8, 2.0.0, 2.1.0 5.70.4, 2.0.0, 2.1.0
heuristics/report_references/directly_referenced_by {} BSI-DSZ-CC-1044-V9-2026
heuristics/report_references/directly_referencing BSI-DSZ-CC-1044-V8-2025 BSI-DSZ-CC-1044-V7-2023
heuristics/report_references/indirectly_referenced_by {} BSI-DSZ-CC-1044-V9-2026
heuristics/report_references/indirectly_referencing BSI-DSZ-CC-1044-V8-2025, BSI-DSZ-CC-1044-V7-2023 BSI-DSZ-CC-1044-V7-2023
heuristics/scheme_data
  • category: eHealth
  • cert_id: BSI-DSZ-CC-1209-V3-2026
  • certification_date: 24.02.2026
  • enhanced:
    • applicant: secunet Security Networks AG Kurfürstenstraße 58 45138 Essen Deutschland
    • assurance_level: EAL3,ADV_FSP.4,ADV_IMP.1,ADV_TDS.3,ALC_FLR.2,ALC_TAT.1,AVA_VAN.3
    • cert_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3c_pdf.pdf?__blob=publicationFile&v=2
    • certification_date: 24.02.2026
    • description: The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten.
    • entries: [frozendict({'id': 'BSI', 'description': 'The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten.'}), frozendict({'id': 'BSI', 'description': 'The Target of evaluation (TOE) is a software product consisting of the Netzkonnektor and the Anwendungskonnektor as specified in the Protection Profile BSI-CC-PP-0098-V3-2021-MA-02. The Netzkonnektor includes the security functionality of a Firewall, a VPN-client, an NTP Server, a name service (DNS) and a DHCP service. The TOE also includes the basic functions for establishment of secure TLS connections to other IT products. The TOE is part of the Konnektor and it is delivered pre-installed on exactly one hardware-configuration. The security functionality of the Anwendungskonnektor comprises the signature service, encryption and decryption of documents, a card terminal service and a smart card service. Together with the network connector, the Anwendungskonnektor also enables secure communication between the connector and the client system and between Fachmodulen and Fachdiensten.'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023-MA-02 (Ausstellungsdatum / Certification Date 19.08.2024) Maintenance Report', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023-MA-01 (Ausstellungsdatum / Certification Date 31.10.2023)', 'description': 'Security Target'}), frozendict({'id': 'BSI-DSZ-CC-1209-2023 (Ausstellungsdatum / Certification Date 19.10.2023, gültlig bis / valid until 18.10.2028)', 'description': 'Certificate'})]
    • evaluation_facility: SRC Security Research & Consulting GmbH
    • expiration_date: 23.02.2031
    • product: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0
    • protection_profile: Common Criteria Schutzprofil (Protection Profile), Schutzprofil 2: Anforderungen an den Konnektor, BSI-CC-PP-0098-V3-2021-MA-02, Version 1.6.1, 15.03.2023, Bundesamt für Sicherheit in der Informationstechnik (BSI)
    • report_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3a_pdf.pdf?__blob=publicationFile&v=2
    • target_link: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Zertifizierung/Reporte/Reporte1200/1209V3b_pdf.pdf?__blob=publicationFile&v=2
  • product: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0
  • subcategory: Software
  • url: https://www.bsi.bund.de/SharedDocs/Zertifikate_CC/CC/Gesundheitswesen_Software/1209.html
  • vendor: secunet Security Networks AG
heuristics/protection_profiles 359e684867077664 {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0098V3b_pdf.pdf {}
pdf_data/cert_filename 1044V9c_pdf.pdf 1044V8c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1044-V9-2026: 1
  • DE:
    • BSI-DSZ-CC-1044-V8-2025: 1
pdf_data/cert_metadata
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1044-V9-2026"
  • /Subject: Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1044-V9-2026
  • /Title: Zertifizierungsurkunde BSI-DSZ-CC-1044-V9-2026
  • pdf_file_size_bytes: 252441
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Konnektor, secunet konnektor, secunet Security Networks AG, BSI-DSZ-CC-1044-V8-2025"
  • /Subject: Common Criteria, Certification, Zertifizierung, Konnektor, secunet konnektor, secunet Security Networks AG, BSI-DSZ-CC-1044-V8-2025
  • /Title: Zertifikat BSI-DSZ-CC-1044-V8-2025
  • pdf_file_size_bytes: 252477
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename 1044V9a_pdf.pdf 1044V8a_pdf.pdf
pdf_data/report_frontpage
  • DE:
    • cert_id: BSI-DSZ-CC-1044-V9-2026
    • cert_item: secunet konnektor 2.0.0 und 2.1.0, Version 6.0.8:2.0.0 und 6.0.8:2.1.0
    • cert_lab: BSI
    • developer: secunet Security Networks AG
    • match_rules: ['(BSI-DSZ-CC-.+?) zu (.+?) der (.*)']
  • DE:
    • cert_id: BSI-DSZ-CC-1044-V8-2025
    • cert_item: secunet konnektor 2.0.0 und 2.1.0, Version 5.70.4:2.0.0 und 5.70.4:2.1.0
    • cert_lab: BSI
    • developer: secunet Security Networks AG
    • match_rules: ['(BSI-DSZ-CC-.+?) zu (.+?) der (.*)']
pdf_data/report_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1044-V8-: 1
    • BSI-DSZ-CC-1044-V8-2025: 2
    • BSI-DSZ-CC-1044-V9-2026: 18
  • DE:
    • BSI-DSZ-CC-1044-V7-: 1
    • BSI-DSZ-CC-1044-V7-2023: 2
    • BSI-DSZ-CC-1044-V8-2024: 1
    • BSI-DSZ-CC-1044-V8-2025: 17
pdf_data/report_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 4
    • ECDH:
      • ECDH: 5
    • ECDSA:
      • ECDSA: 14
  • FF:
    • DH:
      • DH: 7
      • Diffie-Hellman: 4
  • RSA:
    • RSA-2048: 1
    • RSA-3072: 1
  • ECC:
    • ECC:
      • ECC: 4
    • ECDH:
      • ECDH: 5
    • ECDSA:
      • ECDSA: 10
  • FF:
    • DH:
      • DH: 7
      • Diffie-Hellman: 4
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 1
    • SHA2:
      • SHA-2: 1
      • SHA-256: 8
      • SHA-384: 3
      • SHA256: 2
  • SHA:
    • SHA1:
      • SHA-1: 1
    • SHA2:
      • SHA-2: 1
      • SHA-256: 8
      • SHA-384: 1
      • SHA-512: 1
      • SHA256: 2
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
    • BSI TR-03111: 2
    • BSI TR-03116-1: 1
    • BSI TR-03154: 1
    • BSI TR-03155: 1
  • BSI:
    • BSI 7148: 1
    • BSI TR-02102: 1
    • BSI TR-03116-1: 1
    • BSI TR-03154: 1
    • BSI TR-03155: 1
    • BSI TR-03157: 2
pdf_data/report_keywords/standard_id
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
    • AIS 34: 2
  • FIPS:
    • FIPS 180-4: 10
    • FIPS 186-4: 1
    • FIPS 197: 4
    • FIPS PUB 180-4: 1
    • FIPS180-4: 5
    • FIPS186-4: 6
    • FIPS197: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 3
    • PKCS#12: 1
  • RFC:
    • RFC 2104: 1
    • RFC 3268: 1
    • RFC 7027: 1
    • RFC-2104: 3
    • RFC-2404: 1
    • RFC-3268: 3
    • RFC-3526: 1
    • RFC-3602: 2
    • RFC-4106: 1
    • RFC-4301: 3
    • RFC-4303: 3
    • RFC-4492: 2
    • RFC-4868: 1
    • RFC-4880: 1
    • RFC-5116: 1
    • RFC-5246: 4
    • RFC-5289: 1
    • RFC-5639: 5
    • RFC-6931: 1
    • RFC-6954: 2
    • RFC-7296: 3
    • RFC-8017: 3
    • RFC-8247: 1
    • RFC2104: 1
    • RFC2404: 1
    • RFC3268: 1
    • RFC3526: 2
    • RFC3602: 1
    • RFC4055: 1
    • RFC4106: 1
    • RFC4301: 1
    • RFC4303: 1
    • RFC4346: 1
    • RFC4868: 1
    • RFC4880: 1
    • RFC5246: 1
    • RFC5280: 1
    • RFC5289: 1
    • RFC5639: 2
    • RFC5996: 1
    • RFC7027: 1
    • RFC7292: 1
    • RFC7296: 3
    • RFC8017: 3
    • RFC8247: 1
  • X509:
    • X.509: 1
  • BSI:
    • AIS 20: 2
    • AIS 32: 1
    • AIS 34: 2
  • FIPS:
    • FIPS 180-4: 10
    • FIPS 186-4: 1
    • FIPS 197: 4
    • FIPS PUB 180-4: 1
    • FIPS180-4: 5
    • FIPS186-4: 6
    • FIPS197: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
  • PKCS:
    • PKCS#1: 3
    • PKCS#12: 1
  • RFC:
    • RFC 2104: 1
    • RFC 3268: 1
    • RFC 7027: 1
    • RFC-2104: 3
    • RFC-2404: 1
    • RFC-3268: 3
    • RFC-3526: 1
    • RFC-3602: 2
    • RFC-4106: 1
    • RFC-4301: 3
    • RFC-4303: 3
    • RFC-4492: 2
    • RFC-4868: 1
    • RFC-4880: 1
    • RFC-5116: 1
    • RFC-5246: 4
    • RFC-5289: 1
    • RFC-5639: 5
    • RFC-6931: 1
    • RFC-6954: 2
    • RFC-7296: 3
    • RFC-8017: 5
    • RFC-8247: 1
    • RFC2104: 1
    • RFC2404: 1
    • RFC3268: 1
    • RFC3526: 2
    • RFC3602: 1
    • RFC4055: 1
    • RFC4106: 1
    • RFC4301: 1
    • RFC4303: 1
    • RFC4346: 1
    • RFC4868: 1
    • RFC4880: 1
    • RFC5246: 1
    • RFC5280: 1
    • RFC5289: 1
    • RFC5639: 2
    • RFC5996: 1
    • RFC7027: 1
    • RFC7292: 1
    • RFC7296: 3
    • RFC8017: 3
    • RFC8247: 1
  • X509:
    • X.509: 1
pdf_data/report_metadata
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /Keywords: "Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1044-V9-2026"
  • /Subject: Common Criteria, Certification, Zertifizierung, Konnektor, eHealth, Gesundheitswesen, BSI-DSZ-CC-1044-V9-2026
  • /Title: Zertifizierungsreport BSI-DSZ-CC-1044-V9-2026
  • pdf_file_size_bytes: 411320
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 35
pdf_data/st_filename 1044V9b_pdf.pdf 1044V8b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1044-V9-2025: 1
  • DE:
    • BSI-DSZ-CC-1044-V8-2024: 1
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 9
    • ECDSA:
      • ECDSA: 6
  • FF:
    • DH:
      • Diffie-Hellman: 1
  • RSA:
    • RSA 2048: 3
    • RSA-2048: 1
  • ECC:
    • ECC:
      • ECC: 7
    • ECDSA:
      • ECDSA: 6
  • FF:
    • DH:
      • Diffie-Hellman: 1
  • RSA:
    • RSA 2048: 1
    • RSA-2048: 1
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 22
    • IKEv2: 8
  • IPsec:
    • IPsec: 33
  • TLS:
    • SSL:
      • SSL: 2
    • TLS:
      • TLS: 149
      • TLS 1.2: 2
      • TLS 1.3: 2
  • VPN:
    • VPN: 60
  • IKE:
    • IKE: 22
    • IKEv2: 8
  • IPsec:
    • IPsec: 33
  • TLS:
    • SSL:
      • SSL: 2
    • TLS:
      • TLS: 148
      • TLS 1.2: 2
      • TLS 1.3: 2
  • VPN:
    • VPN: 60
pdf_data/st_keywords/randomness
  • RNG:
    • RNG: 15
  • RNG:
    • RNG: 16
pdf_data/st_metadata
state/cert/source_hash Different Different
state/cert/txt_hash Different Different
state/report/source_hash Different Different
state/report/txt_hash Different Different
state/st/extract_ok False True
state/st/source_hash Different Different
state/st/txt_hash Different Different
dgst 46c474d1557de605 9d96d2c8c9433953