bestinfo.at

- Bundesministerium für Bildung, Wissenschaft und Forschung -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number e4:e2:67:5b:fa:af:b4:bb:68:f4:df:ad:38:8e:f7:fc was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bundesministerium für Bildung, Wissenschaft und Forschung

Organization: Bundesministerium für Bildung, Wissenschaft und Forschung
State / Province: Wien
Country: AT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): e4:e2:67:5b:fa:af:b4:bb:68:f4:df:ad:38:8e:f7:fc
Serial Number (int): 304239538504525322943064090709630842876
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 36:93:da:55:bc:18:cc:7f:dc:b7:92:05:bb:de:c3:70:58:20:fe:ff
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 04:14:d4:ae:b8:a2:7f:13:be:65:ae:06:6f:58:f6:9a:cf:7c:78:69
Fingerprint (sha256): 56:ad:3c:f8:e5:f6:43:27:07:40:c9:67:94:49:c6:66:4f:18:47:d9:10:88:e2:26:90:ff:36:ef:3b:f5:13:56

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate bestinfo.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bestinfo.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestinfo.at
www.bestinfo.at

Other certificates including the domain name bestinfo.at

(limited to 100 certificates)
bestinfo.at
bestinfo.at
api.bestinfo.at
tanboedge.com
graph.boosting.ai
paradoxmgmt.com
api.silverfoxmetals.com
bestinfo.at
s.rednfollow.com
pahadilovesa.ga
fr.happysports.app
bestinfo.at
bestinfo.at
app.bestinfo.at
bestinfo.at
bestinfo.at
bestinfo.at
bestinfo.at
bestinfo.at
jfortunatojr.com
bestinfo.at
hmu.party
bestinfo.at
bestinfo.at
uselemon.io
rc.stratj.app
app.bestinfo.at
bestinfo.at
bestinfo.at
www.jasonkelly.info
bestinfo.at
www.clubeolx.com.br
bestinfo.at
api.bestinfo.at
bestinfo.at
aprilhbailey.com
dotuml.com
app.bestinfo.at
bestinfo.at
graph.boosting.ai
bestinfo.at

Certificate

The complete raw certificate details for bestinfo.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304239538504525322943064090709630842876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesministerium für Bildung, Wissenschaft und Forschung'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bestinfo.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675830256278142620394284379429528838700766871175123802269129483077556975493807324837656826026866764992688986870712019404804411887226808332686387132771831487069655031500745668761856466200575808375794292526510290335726545471110692503613618975180106716881172402169304792385937015990230501698316679974543812694688229819413800863972850375449042237979963119875897218348043722211364625868149207962371350307835428804519577827578838944001087020367034079089244551340328093087140756287192991948392701404163806873950085559767695734457269054973304582232519274134503877038255927214646393458910841461821251267298390047065110966737546489021061976223398020678727396351415281492944612321559354822981434238202399026760304973164711802755889564012972726573736180373514754681638587061842466327664400658209731125925890257465990633726568286222126030412383374823814648463336289323526102329275887210191131317939350557876533650427683911809221200737332621456030487224404402462319478601422819775373101325235402596831117777734683384256954143931717371074451186659957735693101743101450520465703141194204198140844689038681962716703483374220289084687434787731228214926653569365910378499647772740202124661171771974024301969175559808027566101916029639515733017631087597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3693da55bc18cc7fdcb79205bbdec3705820feff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinfo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestinfo.at'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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