www.m-tec.at

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:65:5e:21:b1:67:77:a9:f0:f2:43:f3:e7:5e:bd:2b was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.m-tec.at

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:65:5e:21:b1:67:77:a9:f0:f2:43:f3:e7:5e:bd:2b
Serial Number (int): 9830927169142466122822829322065067307
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a2:5e:8f:e6:37:93:d9:5a:cb:96:99:e1:d0:1c:9e:b3:bf:d2:10:78
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 9a:9e:4d:30:ed:c0:8e:0c:a7:3a:25:cd:5a:c5:57:c7:2c:20:c0:9b
Fingerprint (sha256): 9e:20:25:c6:c6:2d:68:d7:a4:bd:e7:9e:53:2f:32:f4:dc:23:77:4d:39:35:87:ac:cb:30:a0:d8:66:a9:ee:9a

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.m-tec.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.m-tec.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.m-tec.at
m-tec.at

Other certificates including the domain name m-tec.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.m-tec.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9830927169142466122822829322065067307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.m-tec.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 984453869729696031737195590491441068480056915147674802867262324518401198526244485839199295880362669218396186902370055406238500850295898404604729680118848596833665625137877513788709079813616458791654247544355455843134015662406101510949143693571328269421596682870235912238652233278341926003100382707461278642514865850173129051554968465073600828443416185547184631848945983088555650121097073943023058690657849618635033177620615001771777133127778212672136491101468279428096470441627450094897974559182711048812382236399151562338529579422652952392477149430031263200534907940219478977915134139169101047133973953017384385707339292237190487706798258569204208286438300100700126986579474084678234989132182565015726884161085374170528690592331087118503678107910390580344170610510809289193304900406024029282085902003331501613614270713932104499448111958398203871787971939026865955050601287690489659279235808167651419385163755989784610974042353281430481334954571736514287182198165853086182977326724315282953338628635135165260117713603376835632985846604576774106959179101325428886065652414759307930231000226171961032242092071531516926811014496299121233943165027195680248782529293818566014485213434356850656103436122349475919687810675198690057554066549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a25e8fe63793d95acb9699e1d01c9eb3bfd21078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-tec.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-tec.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e600af4fe0000040300473045022100e0e078556f53f7e7335efc91667970833c83a284164bc29f96bc7fefbde0f76402206fcfc3b56f96fd2311b0d728a7cae02b389b8de3506d7cdba67a063a7b34f49a0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e600af51700000403004730450220182e14060dcb2d07c357d39fadee29ac1b87acded3dee7225b0cd3b0769ebaec022100e34bfb8c574f0821281a5e8a37c3d3173d9ee06e2c34753d3184ae50bd61ee9d007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e600af511000004030046304402200b5d106561ab81375cbf5645f59d195286b05e96af0d038ae3d41bcf26694bbd0220217c41d92c6f1a225a892c1ab7f8dda1ef9917031dd5e71cb5c6d68d6356c38b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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