webmail.a-rosa.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 89:b7:7a:39:42:da:10:8b:a5:80:a8:63:d1:38:ab:60 was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.a-rosa.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 89:b7:7a:39:42:da:10:8b:a5:80:a8:63:d1:38:ab:60
Serial Number (int): 183056904738311891471473245299131591520
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7e:fb:79:49:9b:58:89:a6:ce:da:d6:03:24:57:f0:02:be:eb:84:ac
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 52:33:43:f4:5c:3d:af:90:ab:64:9b:f6:e4:b6:d0:92:ff:78:55:34
Fingerprint (sha256): 0d:c2:9c:d8:91:83:31:3e:57:b2:48:63:9f:ed:73:1d:66:5f:db:09:03:08:96:40:58:bd:21:eb:5c:f4:1e:7e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate webmail.a-rosa.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.a-rosa.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.a-rosa.de
autodiscover.a-rosa.de
mxsp01.a-rosa.de

Other certificates including the domain name a-rosa.de

(limited to 100 certificates)
www.a-rosa.de
kurs.a-rosa.de
webmail.a-rosa.de
webmail.a-rosa.de
sslvpn.a-rosa.de
a-rosa.de
afleet.a-rosa.de
a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
a-rosa.de
mx01.a-rosa.de
mail.a-rosa.de
kurs.a-rosa.de
m.a-rosa.de
afleet.a-rosa.de
kurs.a-rosa.de
blog.a-rosa.de
a-rosa.de
a-rosa.de
a-rosa.de
a-rosa.de
booking.a-rosa.de
blog.a-rosa.de
blog.a-rosa.de
kurs.a-rosa.de
blog.a-rosa.de
blog.a-rosa.de
webmail.a-rosa.de
a-rosa.de
mail.a-rosa.de
mail.a-rosa.de
old.a-rosa.de
mail.a-rosa.de
a-rosa.de
booking.a-rosa.de
mail.a-rosa.de
webmail.a-rosa.de
a-rosa.de
www.a-rosa.de
kurs.a-rosa.de
a-rosa.de
a-rosa.de
kurs.a-rosa.de
kurs.a-rosa.de
resort.a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
mail.a-rosa.de
a-rosa.de
a-rosa.de
webmail.a-rosa.de
www.a-rosa.de
m.a-rosa.de
www.kurs.a-rosa.de
a-rosa.de
afleet.a-rosa.de
a-rosa.de
a-rosa.de
www.a-rosa.de
blog.a-rosa.de
a-rosa.de
a-rosa.de
blog.a-rosa.de
mail.a-rosa.de
a-rosa.de
blog.a-rosa.de
a-rosa.de
www.a-rosa.de
kurs.a-rosa.de

Certificate

The complete raw certificate details for webmail.a-rosa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183056904738311891471473245299131591520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.a-rosa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712247365229114388069791429895439666244018876433710184624514349487158784864024339442186508080577213036533707620487671578860259463010180968337176921159176611957123462571535921854666088387708007885018925651328088724273967597557883641761291986799602222652254496213797016630034963936771530538500917438345471269913100750072443856759919320610975001099431583359708347477342902565745212061204615641636282081468481629806632014893767637938806016216184107656856879004043719393552298412578342680330906827752383678995927711448043132138098655236987002476751404227845271917133366443108211702029923321455049250352647531355939756979822361945005356871030214726073132559799540250731614539225318922486879398425369040461093077433241139201151672035065135558018996761516868993644318124717559041423433579015268897639849081442589900808523135313973017542779147380039573699365961959766473773912361003733686032953996523425188153959348414686269860605925709934607095088474751265883002098725213199107996760151559760962611771943726440956899847060032436422820618107517949968135153303420539363418337819247325209514705782364450714503361253051712760243644577472725504197379840915862348765468149544829251079402753497971586920744327575782155473636907936577702068772676667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7efb79499b5889a6cedad6032457f002beeb84ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.a-rosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.a-rosa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxsp01.a-rosa.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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