*.s3.hidrive.strato.com

- Strato AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:73:d6:8b:f9:57:f4:5e:97:33:49:a3:29:d8:cd:6b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:73:d6:8b:f9:57:f4:5e:97:33:49:a3:29:d8:cd:6b
Serial Number (int): 19210657605258196332280246997639286123
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fd:e2:f4:b2:2b:61:0a:eb:b2:fd:63:83:b8:a9:03:56:52:5c:e9:05
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 83:44:a3:cf:7f:2e:b6:d6:ae:2f:52:c6:fc:82:f6:68:ab:67:a0:20
Fingerprint (sha256): 02:7f:e4:11:c0:68:ba:24:ae:69:d2:28:84:43:a5:5e:98:bd:73:8a:80:35:0e:6f:6f:8d:c5:9b:7a:8c:bf:32

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.s3.hidrive.strato.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.s3.hidrive.strato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.s3.hidrive.strato.com
s3.hidrive.strato.com

Other certificates including the domain name strato.com

(limited to 100 certificates)
webmail.strato.de
*.s3.hidrive.strato.com
ftp.hidrive.strato.com
api.hidrive.strato.com
*.strato.com
*.webdav.hidrive.strato.com
ftp.hidrive.strato.com
www.hidrive.strato.com
hidrive.strato.com
*.webdav.qsdrive.strato.com
hidrive.strato.com
mx.hidrive.strato.com
smtp.strato.com
backup.strato.com
webdav.qsdrive.strato.com
registrar.strato.com
webdav.hidrive.strato.com
pop3.strato.de
imap.test.strato.de
news.strato.com
*.s3.hidrive.strato.com
www.hidrive.strato.com
*.strato.com
news.strato.com
diag.hidrive.strato.com
*.shop.strato.com
developer.qsdrive.strato.com
api.hidrive.strato.com
www.hidrive.strato.com
webdav.qsdrive.strato.com
imap.test.strato.de
news.strato.com
api.hidrive.strato.com
backup.strato.com
smtp.strato.com
webdav.hidrive.strato.com
hidrive.strato.com
www.hidrive.strato.com
webdav.hidrive.strato.com
smtp.strato.com
*.strato.com
webdav.hidrive.strato.com
imap.test.strato.de
*.webdav.hidrive.strato.com
backup.strato.com
diag.hidrive.strato.com
webdav.drive.strato.com
webdav.hidrive.strato.com
www.qsdrive.strato.com
backup.strato.com
pop3.strato.de
webdav.hidrive.strato.com
api.hidrive.strato.com
imap.test.strato.de
hidrive.strato.com
news.strato.com
*.strato.com
smtp.test.rzone.de
news.strato.com
imap.strato.de
imap.strato.de
api.hidrive.strato.com
pop3.strato.de
webmail.strato.de
hidrive.strato.com
hidrive.strato.com
provisioning.hidrive.strato.com
*.strato.com
webmail.strato.de
imap.strato.de
*.strato.com
api.hidrive.strato.com
imap.strato.de
imap.test.strato.de
mx.hidrive.strato.com
news.strato.com
com4.strato.de
pop3.strato.de
smtp.strato.com
pop3.strato.de
*.s3.hidrive.strato.com
webmail.strato.de
hidrive.strato.com
*.ep7test.strato.com
*.ep7test.strato.com
webmail.strato.de
www.hidrive.strato.com
webdav.hidrive.strato.com
imap.strato.de
www.hidrive.strato.com
*.webdav.hidrive.strato.com
smtp.strato.com
api.hidrive.strato.com
pop3.strato.de
hidrive.strato.com
api.hidrive.strato.com
pop3.strato.de
news.strato.com
sfm.hidrive.strato.com
api.hidrive.strato.com

Certificate

The complete raw certificate details for *.s3.hidrive.strato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19210657605258196332280246997639286123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.s3.hidrive.strato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819762957291826252406262965682929143096470321099492110745451745382393785726554222606031540801583454528194533048407663323060398317559229097653792627671752731965927829591690607816935926360967633359075565320919186492250431127118906670121251116970756346622311625763130095474321805147091419202717267897084165942725515258333940009191409373622055361631629245967756772217896866558730004265359032077914603101749246850828575802294745274976860768042958676951084290670582583451439498594122300476137407880860685382669435499053629862200099460823531485642214984324669057864172610232167923685928531189892399930819837712003291231898604701718407087708876561696681260391027547464345529030945599796465575274801974145638335308358899512518252292902151505792609776045816588322853405725015766753321778152205733134194610515933755667435454833788089942260013655312473630322851730944186713267601211368129821683975768132752123367635500087504254225295004312330189141441633722540198569981343594066849169415795017081117225533639532456818859236782166532643305259395535450226500146720868965307121721960558546999752000185952050007343653415896816552682143276670196455238674575989433529472413700252440576876042597326747123469720415478142790076268897450288304731089892541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fde2f4b22b610aebb2fd6383b8a90356525ce905
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.hidrive.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.hidrive.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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