themarkus.at

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 29:46:d5:c6:ee:9e:88:e6:17:cb:68:44:e6:e5:f3:74 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=themarkus.at,C=AT

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 29:46:d5:c6:ee:9e:88:e6:17:cb:68:44:e6:e5:f3:74
Serial Number (int): 54866144521549833456478992220098524020
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f6:da:b3:28:9c:83:35:f2:01:25:f8:de:76:86:1f:6c:de:29:a7:31
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 23:cf:31:3f:bd:1d:fe:5f:81:39:f3:ad:7a:fb:1d:c8:28:f0:fd:09
Fingerprint (sha256): f1:cd:7e:f1:53:96:e8:7a:2c:9b:38:cb:94:16:9e:7d:10:d5:9c:08:74:95:2c:15:ed:b7:26:65:22:ab:72:05

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate themarkus.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for themarkus.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

themarkus.at

Other certificates including the domain name themarkus.at

(limited to 100 certificates)
nextcloud.themarkus.at
chat.themarkus.at
*.themarkus.at
rss.themarkus.at
jira.themarkus.at
svn.themarkus.at
cdn.themarkus.at
portal.themarkus.at
*.themarkus.at
svn.themarkus.at
jira.themarkus.at
themarkus.at
v.themarkus.at
themarkus.at
themarkus.at
git.themarkus.at
*.themarkus.at
*.themarkus.at
themarkus.at
themarkus.at
themarkus.at
jira.themarkus.at
themarkus.at
fsync.themarkus.at
themarkus.at
themarkus.at
themarkus.at
*.themarkus.at
themarkus.at
themarkus.at
*.themarkus.at
themarkus.at

Certificate

The complete raw certificate details for themarkus.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54866144521549833456478992220098524020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-16 20:25:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 20:25:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'themarkus.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803174975199764547430372423022790237202889398069827757014150685503184171762124041555968430387680625444525705924450053510516435687352040201316110215579686730142086188595507781738057819594670214189461400495957717980756333023839300187443564814492046091878088095819237628180743837846768137986514024022252898556562987889816318455386864995776466024093871752030782170868585617069566959230631938665530789396010432026723120723173687053938057372104976566078324685965185403865938568502876786862283275747429147584822600232010972791013992049904546805442519020811961102235929085388601028556407349815181408342665180988843705221149303273963288629915781233647446929147150625492326897466168935739753263252557662544655159330824734409541669514843761961437186599827026622330070426229547527961965292940233742761839120344772558894231382288663315260960398236540910384589901469382254700694975341070186440653314682574974501429080934278316813538583991641639289939026794618605684421671574160324765096071655627186754080007937318782804428858099885287333964888551349540365716084050165754936159064101400845364027563124605353951560737910786076503467576317893485762315371692579470415500906486608854683995158547044010881092580694394286588634742491896432282350824550719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6dab3289c8335f20125f8de76861f6cde29a731
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themarkus.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094c942a933a486fe1279982a6691a828d08e437a98d400b802485ea3b639405d8aa03d997b749e7c58d2dc402a2aa68e264915e802e3773ff7cc4ac80c033b7f4483883425a78be5c29704d586ec58ae39ab7772b6c837e3790191f1b4ad357785dea1467719100ea4047182d7c078e17a239422572797c6e8065a26f3ef089e657a0165a92e50bfc6953e6f7fcd961b92b107c4ad670146dcb4e2ff550ecb1732ada852edeb833c65605115fd6956baaa87f5149bd66c83b250661f9026891413a137a687000e9efdb21b1bec31ee0996e53b469aa0c91bb1623f4a096240bd17daeb094855fd416e52f70d31e242bbf0745c59d5537e2a4631205bdb5226a4