*.topos3.at

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 3d:a4:bd:f7:10:ad:1b:25:26:22:17:9f was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.topos3.at

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:a4:bd:f7:10:ad:1b:25:26:22:17:9f
Serial Number (int): 19077746518331543468013393823
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 25:bd:3e:c1:96:f7:69:77:c1:21:0e:91:9b:7a:92:ff:6f:f2:18:f1
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 65:e1:2b:7e:e4:bd:e7:37:97:50:47:12:09:f8:75:0b:ac:11:a9:43
Fingerprint (sha256): a9:ea:b9:a6:54:dd:a9:c5:c1:26:a5:5b:98:86:35:35:09:80:fb:ef:ee:00:c5:40:ea:56:e4:6b:5b:81:bd:d1

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.topos3.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.topos3.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.topos3.at
topos3.at

Other certificates including the domain name topos3.at

(limited to 100 certificates)
topos3.at
topos3.at
*.topos3.at
*.topos3.at
topos3.at
remote.topos3.at

Certificate

The complete raw certificate details for *.topos3.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19077746518331543468013393823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 13:25:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-28 13:25:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.topos3.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 625829634595204500372272841939018816488146604608180321387267251937732379134685616496284303882721010165417326811215080863603322326337350375310499684955558694380720896141402513647664799313171736566392619523450998789656359149464828052240443121654476246572152123416514652715121981747997088929870611837778817888627407446115331392758471122106255615274461145643682433348526226061961980455308162192887056589862432314126911638886485252412658331372261596476570793509922983110826819248790094657221308266750102615770777355081024265033669431718229042686324406218390533344776688487673990072375372444577446340109705117766184083883433170851093197361810045300057072514697555982562450538395979039817209295445893298975958769874210939616754915922856928590649519649956048103620915733252415072715799612993011544719726108547140358907476132062882049445961196591945363771233245892932582958975962313269220318522568880692083531418555343546297976497191780331222580378167345318577307489722176231026315232798387648386717640668193039022716396376681562324934357538140011698855901569912664314114332892655947520270835172391956647187573819636372012378243009941743179686962502969818996098089359702358160844800031600803141267082216434654202323410255170324359535384134473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topos3.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topos3.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25bd3ec196f76977c1210e919b7a92ff6ff218f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a3c523c110000040300473045022100d6cc88b405915db43f246f332d642e5211808ada2c76c598a4c23349ef5a7896022064e0f23f93cce9ba6650238a808a5f1d5b846bf244d757181924cf8405ce4247007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a3c523f2a000004030047304502210092f219a92fdd9b06cb5ec618c87bd2f3b6aecd1aa2fb5e65a34ac899fca09347022020ebeec97edb8c00065d2515d700ee4f3cc699a467f1829f61f97672c29a2b65007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a3c523c2c000004030048304602210080d89f27b93c51cae7732fa09fdad8048b59a9aa5716072ba3c53a2b79639bfd0221009ad8de88b8740364992bab313503f75e566cc5bfff6f635fd702d27a7fa00446
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007fdf040ea15b32d877a74d0a2e43a8991be20d234054e24d99061fb5caa0c4a5065c383e54bbbd2125fc8dac146bccc7a6191c9424f13872ab27d664b589c4d59f807c1eed5225609ee9d42812f288c44e4c76da7e9c8c59cf80433c47d30e260616bef4ead3603a280055456cbc12757799595d2bcc18f4f94ff07c9236f0361064366f0011e19e6266641a0c291858829bda718787782d2267ae1ff603a87c65efff5b8d06022d54ce0abda7ce14d31dd9eec2838b0ecf2e6d07c24efa7ca0288fa005efd27f49932068e5811bbee3bcab41a3394e35e33fa82a518faa4c7f6bca032b98019c4378746197d114a1d4a19076ec6b50f2493f09a347fba282ff