www.pria.at

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 12:e8:fe:00:41:4c:43:e7:b3:55:f3:c6 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pria.at,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 12:e8:fe:00:41:4c:43:e7:b3:55:f3:c6
Serial Number (int): 5852400452726664468582757318
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: c7:3a:bb:ff:5d:2c:5a:ef:b5:df:c9:16:7f:24:97:ae:13:01:df:93
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): e4:67:14:ee:7f:e0:b1:62:5a:0d:fe:a2:bb:8a:0b:7d:d2:25:fb:19
Fingerprint (sha256): d2:92:02:a2:b4:e7:a5:c0:04:18:3d:d4:db:9b:7e:12:0d:10:f7:81:8e:81:9c:56:58:d3:6c:7e:e7:93:b8:86

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.pria.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pria.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pria.at
pria.at

Other certificates including the domain name pria.at

(limited to 100 certificates)
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
analytics.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
hedgehog.pria.at
office.pria.at
www.pria.at
anmeldung.pria.at
submission20.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
office.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
www.pria.at
office.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
office.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
ticketing.pria.at
www.pria.at
ecer.pria.at
anmeldung.pria.at
anmeldung.pria.at
hedgehog.pria.at
www.pria.at
anmeldung.pria.at
ticketing.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
www.pria.at
anmeldung.pria.at
ide.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
www.pria.at
anmeldung.pria.at
www.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
www.pria.at
anmeldung.pria.at
anmeldung.pria.at
www.pria.at
hedgehog.pria.at
anmeldung.pria.at
anmeldung.pria.at
camps.pria.at
anmeldung.pria.at
anmeldung.pria.at
camps.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at
anmeldung.pria.at

Certificate

The complete raw certificate details for www.pria.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OiJmub/KuYoB0/+EwF+
On3tamP2+1h8ktsFsOCEbh3EpMha/Kv9dtXAZrAp8NuoGgS11gkpog92Ns1MaOG4
0x8jt+dlBF0lmrIMAtZ+7CM0hTHcx3ZM9GS2e7jr+hnC2WKlPPXOUz2jUMVnjf2t
JANj4D0JYk+Yp1L1aQ9dJEJJw1OCSkrawwb+FE8ZKzSiLzgwQO0btCvfqtCdSgA+
niJiaxCXmKDsqnNAsvRqSK0qk11rcKLh+MAf7f+CH6QvpJsMoHDZNPUNmZpekJUy
m+rmUPYQ2t9p/HMvJvcipCtZ67Yw6FvepYaJpBs9XBW/aPcYprCiAPQD35xMU8XF
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5852400452726664468582757318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 15:29:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 11:48:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pria.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26372235957743520740057835622114757101998676023676806037901465533005987339721858361274285911550078002751974220518159239492650529985798122055134789510478975991205328784565229614938565851046203640862831719733753723069197156399612546738228213549267509539487333219714321051058184921977184287282054919686647480849703217307775044521863348175414710429809937316438921249354810320262809312660450869334612879754346485301292731157145394062643141676062704381742730206199958373768815534465621131598440773660232473034968226423562332779857422591041367825215237441941546002559534574368509923219694375618237383454543315397557468120471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pria.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c73abbff5d2c5aefb5dfc9167f2497ae1301df93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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