*.topos3.at

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 78:01:1f:b6:6d:74:20:02:55:ba:46:15 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.topos3.at

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:01:1f:b6:6d:74:20:02:55:ba:46:15
Serial Number (int): 37139559862936377292121327125
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 17:c0:f0:dc:23:bf:f4:47:bf:a8:aa:ae:16:37:a1:bd:e2:a9:59:9c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): b7:78:36:43:89:07:f5:99:5b:5d:c8:37:67:ad:a5:28:12:7a:db:4c
Fingerprint (sha256): a7:e8:73:96:71:ae:0f:3e:c8:61:0f:3d:2f:35:34:7e:a6:98:2d:df:61:a7:1d:f1:be:89:37:9c:53:df:e0:eb

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.topos3.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.topos3.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.topos3.at
topos3.at

Other certificates including the domain name topos3.at

(limited to 100 certificates)
topos3.at
topos3.at
*.topos3.at
*.topos3.at
topos3.at
remote.topos3.at

Certificate

The complete raw certificate details for *.topos3.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37139559862936377292121327125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-06 13:41:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-07 13:41:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.topos3.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982107115990591209996791186692006511954789851317411311714273917294452898806314450841194149327299275965031824970134972316751851504199316200873639444756639779783491038705123576753395133228349871488688146509457211874637864058538486024050732652185783729447620684110846819082277925704393117428977475989915878891560007407452433564816062717867807765280845346597411766319704501862619836392422275063680174522600083417120599530133722292958036119940003711406654328847117323226828754534088419115595261449153871159391437041722046803495637287356840194374822140716590897061820094959392796558981269414491877261716090407262997131013921609088487043501700973180729226437652704693363123443969385629233290288690514309192082009744474666743427984355569654401798371858159920427268430007938844277082733426037557556082492452566056698080232886435470082751034604145677293640351517294616248053992748642057063851449576663989545771464399254073799766886066305733100836755957482322816482573136881503003687302578171092156032113395553215001050105878278467671038231417443995098805399276359451300700773980853749095495481716106950332223476830044568696128179031775028015812743620702866845402750450559452182060763036985056160546296645726828444101572077612031132853755209393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topos3.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topos3.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17c0f0dc23bff447bfa8aaae1637a1bde2a9599c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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