profi.sonax.at

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5f:3b:1a:8f:79:6c:24:fc:28:79:00:09 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=profi.sonax.at,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:3b:1a:8f:79:6c:24:fc:28:79:00:09
Serial Number (int): 29472527984547410642906710025
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a0:99:18:d7:98:4c:94:d0:09:b4:99:eb:96:10:80:e5:66:50:12:76
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 9d:f5:85:71:90:70:59:55:bd:7f:5a:92:58:2b:93:a9:bd:28:07:65
Fingerprint (sha256): 42:49:66:77:ea:5f:ff:ef:75:17:c7:ec:ac:67:1d:7b:7d:46:43:e7:2a:48:20:13:e9:4f:e2:46:24:89:e1:90

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate profi.sonax.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profi.sonax.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

profi.sonax.at

Other certificates including the domain name sonax.at

(limited to 100 certificates)
qr.sonax.com
admin.sonax.at
www.sonax.at
www.sonax.es
www.sonax.fi
www.sonax.fi
es.sonax.com
admin.sonax.at
www.sonax.at
profi.sonax.at
www.sonax.fi
www.sonax.fi
www.sonax.fi
www.sonax.fi
en.sonax.is
www.sonax.fi
www.sonax.fi
*.sonax.at
profi.sonax.at
www.sonax.at
admin.sonax.at
admin.sonax.by
admin.sonax.at
www.sonax.fi
admin.sonax.by
*.sonax.at
www.sonax.fi
admin.sonax.at
www.sonax.es
admin.sonax.at
www.sonax.fi
www.sonax.fi
www.sonax.fi
admin.sonax.at
en.sonax.is
www.sonax.at
admin.sonax.at
www.sonax.fi
admin.sonax.by
admin.sonax.at
pim.sonax.de
www.sonax.fi
www.sonax.by
profi.sonax.at
admin.sonax.be
admin.sonax.at
es.sonax.com
profi.sonax.at
admin.sonax.at

Certificate

The complete raw certificate details for profi.sonax.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e0X4A+EVpHslSzvea/5
41EVK+UOyfqP1OvIvLuXQdw6OQLwgrzEziD6Q6YHOzyzJV40M15h+stKKoBKA1kY
YJWrieib1SxacaWhTY28n2qob0o7UymaMDvPt9tIDugYSUdVaI/A2Xjn3yFjLhuT
svY8fSyj4jumMTgKtLwE9vYe5STR171jrr+egog4xcrvycvErsuAnkjRNx6ZWIJV
NyniIjoGkURduThaBVeXy6YEeJAQkwxcf06koSsWRsC/004fEDKjcBfAgsC63wUV
OCpZ4YyF/pGYqBRhAQLRQV6dH70l5KY/AwDlKGQ8JHPoMIcprMMcT8iJ2MsMGRdn
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29472527984547410642906710025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 11:45:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 11:45:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profi.sonax.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27005674003063473485548482571532331660802271216490350098464384264734779428933077023822512190391112864480333085345684041978801307901548281375275323385542764603377326772404353681809225223272995646520464647741740642522247233990767054463003231551354553499257391165785046070170851691040011221010469540038236935637344240770416299710576058205922955841394490569917827452358620706243747361796059949772816316514477358506228615582568444634884811045841930138977209236635957893823398254443815388229699942671272655509707318836320924630025757795635697270245253500259178142799245249320293065740324294202433250587364591345109577459663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profi.sonax.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a09918d7984c94d009b499eb961080e566501276
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							0258007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b8b2e942e000004030046304402201d63369970e9e8e1adbc8d421ec7f16e8496e98834d2973843d6a5fdf3a25cc0022026b0d7e80114593caca30c1e5d971de170d8ec85d5e7c8842f1222f3cd84eb650076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b8b2e944e0000040300473045022100e08cd553507c10f002f6d0b2fe4fb749800d9b3e976ed0a79f27e95b7377cf800220712f09caeb98b342e93f3f700a72ffaf39f7be62968c13a25ff66282a9f4a5a8007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b8b2e96fa000004030047304502201920a0b21caabf43395c4f35b6ce25e3e7fdb637294ad74616716e8f009dfec7022100f2c10e1947c35082322dd1a667a1e5b5d2f8ce32badb7f676e062317db9d2db0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015b8b2e97c1000004030047304502200e749f93954708f2bdeeb78375aae99a2dd2ad29d1a54024fd3e6396e151c25c022100e02135412f3b0ce01f2c57b354c9d4595bd4511f921904d2b7506835166d7d53007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b8b2e99f40000040300483046022100b89dbada3425535b7c9249f655e1ba73d315949030a1ee0aefde98a400b81bbe022100bf155edb0dbe0f84a4779d3d356784e36d7bd9ef1aa3aae6609ffad39e3b7cc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a533f3227fe63be7a61ee3273a994fe17481bda1f861c09a24da9893eb991c7ebcd763061cdc75c567d44eaea5adeb9bebf03d04866fb70af8a25c1e1d672c183c9cf44dcfa90c971eb202627b20231d8fc54eb078e98ffe755077f9e128c5e41b435075b846ce2eb8cdc45a8c5f2ffb54ed9b584330f19eada07c3e8ef1b3c5beac14ef97f399eff020bbc373b54f160a4e295be932ba71c09f57c3c85dc4dbcbea10a58992b5c2b95f396d298735be13795f6c13fa0671a40ea259b703961959ecc868a33f64fc0c248625e9a735827d8ce6cac5b5f949ecd8feb5c93974ffab5da2dd85ebebdb95742e5c2cb5a7ae9f9dd9950d3ef3d1384425d615524d9