o.mailxchange.de

- 1 und 1 Internet AG -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 38:bd:a3:d1:51:51:fc:8d:05:18:30:01:26:b9:98:1c was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

1 und 1 Internet AG

Organization: 1 und 1 Internet AG
State / Province: Rhineland-Palatinate
Locality: Montabaur
Country: DE

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:bd:a3:d1:51:51:fc:8d:05:18:30:01:26:b9:98:1c
Serial Number (int): 75421434486837133432560548859199723548
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 6c:3a:c0:e4:5b:4e:04:39:45:03:fe:89:ed:1e:32:4e:d2:8a:44:17
Fingerprint (sha256): 05:72:fb:50:b8:22:fd:64:20:54:3e:fb:91:ca:9e:bb:ac:15:c3:39:7d:3f:f7:d8:95:fe:b9:6f:0e:d7:9b:e7


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate o.mailxchange.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for o.mailxchange.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

o.mailxchange.de

Other certificates including the domain name mailxchange.de

(limited to 100 certificates)
o.mailxchange.de
mailxchange.de
www.mailxchange.de
mailxchange.de
mailxchange.de
m.mailxchange.de
s.mailxchange.de
mailxchange.de
dav.mailxchange.de
www.mailxchange.de
mailxchange.de
s.mailxchange.de
m.mailxchange.de
www.mailxchange.de
mailxchange.de
o.mailxchange.de
mailxchange.de
sync.mailxchange.de
mailxchange.de
mailxchange.de
sync.mailxchange.de
www.mailxchange.de

Certificate

The complete raw certificate details for o.mailxchange.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kY8FA6pQz84GErnAmWx
yj/J0dS3qZW08vYqTSW7KSCmIKK+X7jDGiL/NrPTOmt3gkYHgFhB0DAhhKmAWq0d
KJ+MBRkTY0WHYPIU67LsfPu54LU6A+XX5bvtjjZNd47WIP1CUQDF72Zrq3jBFc1j
INxJccJSvwo5jk6yNl2UUYaa5ac8kKPu1/C6887s4D7fKTiktIj5x8giDbsT2qTy
bDSx+S6h825mg3xB7fQubIzQ8nTpmbNX7LkzzjYu65fJFfm+6GJrKvef0EtrjfOF
giHoFqY7kf5czmwdgMT4QtJivgxIz7sxYEGUUXXMSE50j+++IJSuWQotSd78WkVC
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75421434486837133432560548859199723548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhineland-Palatinate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '1 und 1 Internet AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'o.mailxchange.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27554584494653671487536551034640802617337927451296164375727531595033082236551397068240069845627995587755572647626845484241490177051676027308803048503765922688203487527559514989053762514789335295476369415271191250780444711536365952367698517931236234956255359774659444728448190800251504723729438670005272752845434799280070745008821387334307312286483750104916578424400748519072227529835054368017576227603889539255866207582921153691317055966546664888635778019599228228720262445017805904062974805166653168230968374290069314948988026303999879133758089345100253794646682802772293917218197302934586927835211684144574733042407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o.mailxchange.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0082c33ebb0d9b2e0038ccae9618281bb851d35efc15b8ed06ee48fb0b00300354284b6df347b65ddaeca08a80e9bab134932b10e61ba8cbbe25ac4c2b62b513fa2fe1a2687c7ee36af057a7884a6a5e2e7168fa6ac00ec77392c0de11f12ded82817cf97a6dd46dbca111b55d0c674d8f013744bc596acd2910e948e6aa814247eec71e12125290c36d6595bc9aada08f9c86a25716276b5e3cf0c254237182e1994e3b8ef88370a8564f6ad23ed41338094f7011462e5ce484a9dba5bfee49dbde85fdc9a2e92d74e8aa364c87a0b600661d02e7e5711a1ff568de4ca658644907a37d6e8f947a1de30de794c5b1a63ed270f0b12d9cb0606cb6eb2cceeb0d8e