www.derstandard.at

- STANDARD Verlagsgesellschaft m.b.H. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:a9:bf:8f:1a:d8:aa:66:b6:5f:ec:b2:95:80:0d:28 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

STANDARD Verlagsgesellschaft m.b.H.

Organization: STANDARD Verlagsgesellschaft m.b.H.
State / Province: Vienna
Locality: Vienna
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a9:bf:8f:1a:d8:aa:66:b6:5f:ec:b2:95:80:0d:28
Serial Number (int): 3539839438832297553283715338067774760
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f0:50:fc:24:27:a4:e9:f4:59:4f:de:b8:5e:76:05:e2:a7:e8:c4:f0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d4:cc:da:a8:72:bc:46:4f:b8:1e:4d:26:95:77:93:30:f2:c4:4e:c8
Fingerprint (sha256): 0a:02:a9:7e:5d:8d:f7:79:d1:7a:b0:5c:9e:22:ea:9d:76:16:a2:dc:99:33:3e:3a:e9:1d:02:6e:b3:97:8d:df

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.derstandard.at

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.derstandard.at

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.derstandard.at
at.staticfiles.at
b.ds.at
b.staticfiles.at
de.staticfiles.at
derstandard.at
derstandard.de
i.ds.at
images.derstandard.at
px.staticfiles.at
www.derstandard.de

Other certificates including the domain name derstandard.at

(limited to 100 certificates)
immobilien.derstandard.at
derstandard-spat.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
janitor.derstandard.at
px.derstandard.at
images.derstandard.at
derstandard.at
mobile.derstandard.at
www.derstandard.at
livestat.derstandard.at
derstandard-spat.derstandard.at
livestat.derstandard.at
mobile.derstandard.at
static.derstandard.at
sa23gl.wpc.edgecastcdn.net
intern.derstandard.at
ts.derstandard.at
fsm.chip.de
derstandard-spat.derstandard.at
source.cuisineactuelle.fr
incapsula.com
emagazin.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
derstandard-spat.derstandard.at
checkout.derstandard.at
incapsula.com
livestat.derstandard.at
sa23gl.wpc.edgecastcdn.net
sa23gl.wpc.edgecastcdn.net
static.derstandard.at
incapsula.com
jobs.derstandard.at
livestat.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
emagazin.derstandard.at
tsgw.standard.at
editorial.derstandard.at
www.derstandard.at
mobile.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
fsm.chip.de
support.derstandard.at
derstandard-spat.derstandard.at
janitor.derstandard.at
editorial.derstandard.at
livestat.derstandard.at
www.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
imagesintern.derstandard.at
email1.derstandard.at
www.derstandard.at
www.derstandard.at
incapsula.com
www.derstandard.at
onvista.de.onvista.com
incapsula.com
auth.derstandard.at
www.derstandard.at
sa23gl.wpc.edgecastcdn.net
livestat.derstandard.at
data-dda7d24eb2.derstandard.at
derstandard-spat.derstandard.at
epaper.derstandard.at
px.derstandard.at
janitor.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
about.derstandard.at
email2.derstandard.at
epaper.derstandard.at
editorial.derstandard.at
www.derstandard.at
text.derstandard.at
incapsula.com
sales.derstandard.at
sa23gl.wpc.edgecastcdn.net
text.derstandard.at
apps.derstandard.at
incapsula.com
emagazin.derstandard.at
livestat.derstandard.at
text.derstandard.at
editorial.derstandard.at
spiele.derstandard.at
janitor.derstandard.at
incapsula.com
auth.derstandard.at
px.derstandard.at
derstandard.at
livestat.derstandard.at
email1.derstandard.at
jobs.derstandard.at
incapsula.com
black.derstandard.at
www.derstandard.at

Certificate

The complete raw certificate details for www.derstandard.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7Utn/2Sm6EgxTILh5nth7hOV3+RB
QkUYB5tjRRve9eeSEVOKg4yV260jIgD01Em0BF1sZy9px7xz2vXItwoMjg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3539839438832297553283715338067774760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'STANDARD Verlagsgesellschaft m.b.H.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.derstandard.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ed4b67ff64a6e848314c82e1e67b61ee1395dfe441424518079b63451bdef5e79211538a838c95dbad232200f4d449b4045d6c672f69c7bc73daf5c8b70a0c8e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f050fc2427a4e9f4594fdeb85e7605e2a7e8c4f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.staticfiles.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.ds.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.staticfiles.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.staticfiles.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ds.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.staticfiles.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derstandard.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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