t.at

- T-Systems Austria GesmbH -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0f:ae:72:9e:b0:de:e8:e3:a2:a7:7b:92:ae:f8:f9:a5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

T-Systems Austria GesmbH

Company registration number: 79340b
Organization: T-Systems Austria GesmbH
Locality: Wien
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ae:72:9e:b0:de:e8:e3:a2:a7:7b:92:ae:f8:f9:a5
Serial Number (int): 20844204357642134693781664719370254757
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:e6:82:a3:4b:6e:3e:dd:d6:77:9e:7c:8a:2a:2d:fa:2b:1d:ff:2d
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 39:eb:a1:db:a1:c7:14:a7:a2:1e:53:39:c7:71:0a:84:52:a3:a0:51
Fingerprint (sha256): e8:c5:71:0c:51:70:93:da:71:b7:ef:61:52:89:5f:b0:17:07:18:2b:ea:39:9f:ca:03:79:50:d5:60:bc:75:3d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate t.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.at
www.t.at

Other certificates including the domain name t.at

(limited to 100 certificates)
t.at
www.adultdaters.com
app.t.at
t.at
leetprism.co.za
t.at
crl.dwmas.ca
auth.atomi.studyo.fi
t.at
auth.digiocm.com
t.at
www.temelbilgisayar.com
auth.digiocm.com
grandslamforcause.leaguesquare.com
t.at
app.t.at
youtube-api.itxi.aero
t.at
eldritch.systems
t.at
www.alveseng.com.br
t.at
www.adultdaters.com

Certificate

The complete raw certificate details for t.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20844204357642134693781664719370254757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '79340b'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems Austria GesmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815650097481056764101115232804322768991608768355021203034377757260159708003659219934429236605645780527832985765665015210961075454970976352319200733316567318911727460830133912260686180366999174946949109129356533733457068060466883729117842634583100016762510089015298425516770247094843667078154720801791068350987102364147205434682335057916006251395995403528333681513060116370125008543587784556993669543293891166988869007247154299448949711080856719775938017834034786532462568465958099322803800846796335510093586486677573006984754679418121802092117282955047526251634297351176773917599908466218960090294996566986417966597795674729917174518553756888403152017602890379976831501836914002905148800463897060445278710448496286579683814581640401406849660858121841378181025395263652080109041944254039296799058207128792836737254298321932536772488356814263880322047636836898266172268103154295337492251863136703006758084689608208008559096668633999973165552596118940746085164615309195217501687738253562597128997716256236236949176991287857993467016102799220860479605760348855945535272713866771938974782792656123938530958018140732684559124595446425583733415171676423278128861466265769305963983505645899949016270654403749026862865563489501258315634286927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ace682a34b6e3eddd6779e7c8a2a2dfa2b1dff2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e663f06c657c4c3a6f334c8e587a92b682855c2860e5a7fc0d77fae49e3c000498d0970049faebf2083f69ff2e64a802e11a15dc34db71955c44c19ad5af5c1269fd0eabb926667f32994a1d5f844821ca64029536bfd401b18b55e392522035b031535c2f266f0759e19a63ceb4f5917e62963527f1dc8aedf0b3dbd3e4261d3d16f7457e8d03df0a0f8d7a45bc9aa2d73bd840e6aeea58f3d917222ff7d3182db882d2ea6fd8b6d8577baeaa0ecea5ee8352bda346e0e4f001a7efe511aba2748a349634268d39922e86881a81231ea5eced3e6964ab7f8b8d3a2a9c3ef85a1903dc62e53df1175ef815eadb1de4723111563e63419062fec7b653581de07