mailxchange.de

- IONOS SE -

Issued by Telekom Security ServerID OV Class 2 CA

About this certificate

This digital certificate with serial number 0c:f9:68:68:23:3f:da:c8:84:36:c3:eb:62:04:d2:86 was issued on by Deutsche Telekom Security GmbH.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS SE

Organization: IONOS SE
State / Province: Rhineland-Palatinate
Locality: Montabaur
Country: DE

Deutsche Telekom Security GmbH

Organization: Deutsche Telekom Security GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:f9:68:68:23:3f:da:c8:84:36:c3:eb:62:04:d2:86
Serial Number (int): 17245735488431014656716875397463331462
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 75:0f:bc:28:45:6c:29:00:d9:3c:63:25:70:bf:51:93:0a:91:40:0a
AuthorityKeyId: 1c:05:93:b1:7f:a8:34:30:8c:52:e0:96:40:a0:72:a3:10:5d:e0:ff

Fingerprint (sha1): bb:8f:74:a2:13:78:f2:82:56:f8:cc:5e:7a:4a:14:df:d9:57:2a:67
Fingerprint (sha256): 27:91:0c:fa:61:53:32:62:1b:34:47:e5:04:64:87:7b:b3:84:9b:8c:b1:c4:88:b8:83:38:4e:e6:8b:7a:b1:e1

Issuing Certificate URL: http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt

Revocation information

OCSP Server: http://ocsp.serverid.telesec.de/ocspr
CRL Distribution Point: http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl

Check the revocation status for certificate mailxchange.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailxchange.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailxchange.de
www.mailxchange.de
s.mailxchange.de
dav.mailxchange.de

Other certificates including the domain name mailxchange.de

(limited to 100 certificates)
o.mailxchange.de
mailxchange.de
www.mailxchange.de
mailxchange.de
mailxchange.de
m.mailxchange.de
s.mailxchange.de
mailxchange.de
dav.mailxchange.de
www.mailxchange.de
mailxchange.de
s.mailxchange.de
m.mailxchange.de
www.mailxchange.de
mailxchange.de
o.mailxchange.de
mailxchange.de
sync.mailxchange.de
mailxchange.de
mailxchange.de
sync.mailxchange.de
www.mailxchange.de

Certificate

The complete raw certificate details for mailxchange.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAyNbu7jJd7YeeYE1RKpTP
14p4tpcempbwYuK2XyV97i9xXeYwCerH/yHPL0aOWN+eUbV8fAegwQT1MJ7ea2sk
iPMJeo7x7lOUkJ7V09WE42guvc0xLtczfVMRjKm8TcMe8wGs/GdhcBlyVA4JvXcl
pvwHBkrwjhv0j8M+LAQS9ChX1fdIXckQi1cALrKYfv8kGARKj2X3PULu851smjUd
WYLn4t0tU5gIM8v//XCfurdwYmM1ZjT2uXTQFWQ/p4fkpacYVqK7IvDd3Di/Oqjf
Z/Jlc69KzhWrlIXWPtJKxV1u1XPrCbdt4YYk+1WJ4jrCglMr8D9XQMAACSwj0y+N
2Dtz4KUBS8POm2STMdCHbBvzB07IvgQZXaGUtAjT+wGoz5A0gn7qWnrGOt8ae3ny
7N1voBe8/OvaPr5k9iROQRHdkdeK1fVesgCbdJEU5pUjQS0OVmFbpQvDT9+F9fFR
u+ROc7vSMy9UmXPtu5bfr8Z1294pQURUugntlGXm0PVlAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17245735488431014656716875397463331462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Telekom Security GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telekom Security ServerID OV Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 06:43:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhineland-Palatinate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mailxchange.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4557807996819814257910183136529972157046729171012836901465060172784811506573580235059422480666392999584345796946898817760126605926644246410509337327226685774321050209602634010198681957021500366382464074271811641901072788624598031673850947896838180147171360424795756194857099115975585222197457909348268607453160522109779626772547303173830469679851802070596412674364467622989944406980774456519340364681645072029215280792459237496638082291219433006310507221127326897653105085216007404999980820710660024907114499638270978447425974303581475855340811751579603866533835809771640984008344773622025100179951532018925878883529077258479931512857711250716967887595794177958066545437907587651651944961348151833495962437041491590290857861705142577904252624367563458042756334163972792147388550966027267294819155322322970614369977999252014500082381031231129152798130446610916021335451770746687524137329693566361991484080990502945773925234021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c0593b17fa834308c52e09640a072a3105de0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							750fbc28456c2900d93c632570bf51930a91400a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://docs.serverid.telesec.de/cps/serverid.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverid.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailxchange.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailxchange.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mailxchange.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.mailxchange.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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