Gynobe s.r.o

Issued by a-sign-light-03

About this certificate

This digital certificate with serial number 54:66:dd:be was issued on by A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Characters in labels of DNSNames MUST be alphanumeric, - , _ or * (BRs: 7.1.4.2)
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber certificate cRLDistributionPoints extension must contain the HTTP URL of the CA’s CRL service (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Subscriber Certificate: A certificate containing a subject:givenName field or subject:surname field MUST contain the (2.23.140.1.2.3) certPolicy OID. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent. (BRs: 7.1.4.2.2)
  • CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
  • Subscriber Certificate: subject:stateOrProvinceName MUST appear if the subject:organizationName, subject:givenName, or subject:surname fields are present and subject:localityName is absent. (BRs: 7.1.4.2.2)
  • Subscriber Certificates issued after 1 July 2016 but prior to 1 March 2018 MUST have a Validity Period no greater than 39 months. (BRs: 6.3.2)
  • Subscriber Certificates issued after 1 March 2018, but prior to 1 September 2020, MUST NOT have a Validity Period greater than 825 days. (BRs: 6.3.2)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • RSA: Public exponent SHOULD be in the range between 2^16 + 1 and 2^256 - 1 (BRs: 6.1.6)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

Certificate Subject

SERIALNUMBER=472543697404,CN=Gynobe s.r.o,C=AT,1.2.840.113549.1.9.1=#0c23435a41303130323040637a2e746f702e6d65646963616c6e6574776f726b732e636f6d,2.5.4.42=#130647796e6f6265,2.5.4.4=#1305732e722e6f

A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH

Organization: A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH
Organization unit: a-sign-light-03
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 54:66:dd:be
Serial Number (int): 1416027582
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 4b:77:cb:9b:bc:79:0c:12
AuthorityKeyId: 4c:f7:2e:d2:64:97:e6:77

Fingerprint (sha1): 15:2f:7f:40:d3:a0:b1:07:6b:ae:ce:9a:d4:7f:7f:1f:b8:9a:80:3e
Fingerprint (sha256): 49:90:20:14:3d:1e:f8:26:cb:db:b5:f9:7c:52:ce:69:57:ac:6a:c6:7d:df:ca:3f:8d:75:e0:08:ed:ed:9f:2c

Issuing Certificate URL: http://www.a-trust.at/certs/a-sign-light-03.crt

Revocation information

OCSP Server: http://ocsp.a-trust.at/ocsp
CRL Distribution Point: ldap://ldap.a-trust.at/ou=a-sign-light-03,o=A-Trust,c=AT?certificaterevocationlist?base?objectclass=eidCertificationAuthority

Check the revocation status for certificate Gynobe s.r.o

0

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Gynobe s.r.o

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

[email protected]

Other certificates including the domain name r.o

(limited to 100 certificates)

Certificate

The complete raw certificate details for Gynobe s.r.o in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAtpbc88vfcg6G0VysD0jU
B2tujHbBV3xZB2GVkeH9r1NfozHHCTLntjJ/lE5t3raxgxLFs6Zp8fN0u1r5CR2l
v/EFE4cm9DO6cKDAqKDhUh1FHxakrbodac9GxQTIbEEIS0kJ9eGoQZnqjLqxvXN5
+/aVyiQtYPv0kn6V8yzB4nyI1ZjSErI1blO2DpAj9K+WbqNEiWM8G1LSo6EYT+r1
TpxvK+znNbTzo8unjpso+WPLBaZbBP9pdq0dUSkGa7Z5jv+15I8c+UZaSSwFn0+V
9OeUGg1YIY5eH+p79gvDaF11JR9PhNGIxa72/sE8XcJ79vQvEcBz6tntG+2VdqMG
/wIBEQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1416027582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'a-sign-light-03'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'a-sign-light-03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 06:34:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 04:34:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gynobe s.r.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.4 (surname)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 's.r.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.42 (givenName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gynobe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '472543697404'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2144 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23049764868664343776823354238544742315457431370750537285630037352121284259768964439588697938370438824898844289075382267622444448809848433606251609455805317068052682695394564252446505696507927634983441095375594757539978422530962248916438653232533461936087468569067507588102037875980842643901340117815193647076802107870758320715112048670053729001015485344859847242972876462829709652038180452152088348698227576880656636828193503688403053750130905395224473806278488059086894437237754631032587889347943688136140426478474792875792408183611587294103599093432866916643173244155714437925029717786153701534906628417511372293887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.a-trust.at/certs/a-sign-light-03.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.a-trust.at/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf72ed26497e677
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (8 bytes)
							4b77cb9bbc790c12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.40.0.17.1.9.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.a-trust.at/docs/cp/a-sign-light-hcs'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.a-trust.at/ou=a-sign-light-03,o=A-Trust,c=AT?certificaterevocationlist?base?objectclass=eidCertificationAuthority'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00101da1160663debd483d702b3a4d8e2a6bc2d5a36acc90485f5741178a96ef8601d4633b175d68b06d37250c86e946e569158182c753f1d944008d36f94aa3a5d26e982830c8e2e617d94faf50aaf0458c365ecccd997ccfdb1599d0452078845569dcc3f4c2a6bdd41c14697bbd009e168872d7100392c6b9bb4939de82c59100590c7f4ce1dbf11b1e1584e638c5029227a820bc4af4b194afa69e2e69173711619963ec737b84c3993eeddf0e892cfbc3886379fd173719697ac06c16a0b795d3eed1138d78a0a83bdb689129b8c0aa695a4da45632e14069daeae977f57d96d4d90871f8209727c7166636e8bffbbbfe37805e4606b31cb5fc1e6f99fe20