t.at

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number fe:26:0a:71:81:36:b1:9b:98:2f:7d:10:2d:94:61:f9 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=t.at

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): fe:26:0a:71:81:36:b1:9b:98:2f:7d:10:2d:94:61:f9
Serial Number (int): 337821430026861042786317164033919443449
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ac:e6:82:a3:4b:6e:3e:dd:d6:77:9e:7c:8a:2a:2d:fa:2b:1d:ff:2d
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): ef:52:58:e4:40:b9:c5:43:c1:c3:b9:84:11:82:20:76:97:5f:89:b2
Fingerprint (sha256): 03:76:f0:5b:1e:63:38:18:33:89:da:47:09:29:ff:07:ff:50:b1:ee:bc:fc:71:78:63:fd:a1:94:a4:98:72:22

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate t.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.at
www.t.at

Other certificates including the domain name t.at

(limited to 100 certificates)
t.at
www.adultdaters.com
app.t.at
t.at
leetprism.co.za
t.at
crl.dwmas.ca
auth.atomi.studyo.fi
t.at
auth.digiocm.com
t.at
www.temelbilgisayar.com
auth.digiocm.com
grandslamforcause.leaguesquare.com
t.at
app.t.at
youtube-api.itxi.aero
t.at
eldritch.systems
t.at
www.alveseng.com.br
t.at
www.adultdaters.com

Certificate

The complete raw certificate details for t.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337821430026861042786317164033919443449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815650097481056764101115232804322768991608768355021203034377757260159708003659219934429236605645780527832985765665015210961075454970976352319200733316567318911727460830133912260686180366999174946949109129356533733457068060466883729117842634583100016762510089015298425516770247094843667078154720801791068350987102364147205434682335057916006251395995403528333681513060116370125008543587784556993669543293891166988869007247154299448949711080856719775938017834034786532462568465958099322803800846796335510093586486677573006984754679418121802092117282955047526251634297351176773917599908466218960090294996566986417966597795674729917174518553756888403152017602890379976831501836914002905148800463897060445278710448496286579683814581640401406849660858121841378181025395263652080109041944254039296799058207128792836737254298321932536772488356814263880322047636836898266172268103154295337492251863136703006758084689608208008559096668633999973165552596118940746085164615309195217501687738253562597128997716256236236949176991287857993467016102799220860479605760348855945535272713866771938974782792656123938530958018140732684559124595446425583733415171676423278128861466265769305963983505645899949016270654403749026862865563489501258315634286927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ace682a34b6e3eddd6779e7c8a2a2dfa2b1dff2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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