mta-sts.r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:b2:a2:ab:1e:02:97:b2:d1:76:b7:b8:8f:71:d2:3b:5d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mta-sts.r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:b2:a2:ab:1e:02:97:b2:d1:76:b7:b8:8f:71:d2:3b:5d
Serial Number (int): 263275716835895919386768406234966768368477
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:21:3a:c9:2c:d6:d8:5c:4c:84:a9:b2:c0:54:3e:0a:df:37:28:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:45:d2:b1:1a:a0:7e:07:d1:b2:26:e3:5e:89:2d:72:85:fe:e1:3a
Fingerprint (sha256): 27:d5:0b:b2:43:57:40:be:eb:43:e2:c4:90:80:b5:b3:27:74:8c:de:a4:81:88:5c:e6:a0:72:da:8d:67:e3:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mta-sts.r13t.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mta-sts.r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mta-sts.r13t.de
mta-sts.r14t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)
oc.r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
mail.r13t.de
jabber.r13t.de
nc.r13t.de
mail.r13t.de
blog.r13t.de
dyn.r13t.de
rc.r13t.de
mail.r13t.de
r13t.de
oc.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
r13t.de
r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
nc.r13t.de
r13t.de
oc.r13t.de
r13t.de
jabber.r13t.de
oc.r13t.de
blog.r13t.de
oc.r13t.de
matrix.r13t.de
matrix.r13t.de
nc.r13t.de
matrix.r13t.de
rc.r13t.de
oc.r13t.de
www.r14t.de
oc.r13t.de
dyn.r13t.de
mta-sts.r13t.de
mail.r13t.de
mta-sts.r13t.de
blog.r13t.de
rc.r13t.de
matrix.r13t.de
r13t.de
kibana.r13t.de
graylog.r13t.de
mta-sts.r13t.de
r13t.de
matrix.r13t.de
mail.r13t.de
dyn.r13t.de
nc.r13t.de
matrix.r13t.de
mail.r13t.de
r13t.de
r13t.de
oc.r13t.de
oc.r13t.de
rc.r13t.de
jabber.r13t.de
r13t.de
blog.r13t.de
matrix.r13t.de
blog.r13t.de
r13t.de
r13t.de
mta-sts.r13t.de
dyn.r13t.de
oc.r13t.de
matrix.r13t.de
seafile.r13t.de
r13t.de
r13t.de
oc.r13t.de
dyn.r13t.de
nc.r13t.de
nc.r13t.de
oc.r13t.de
seafile.r13t.de
oc.r13t.de
matrix.r13t.de
oc.r13t.de
oc.r13t.de
dyn.r13t.de
matrix.r13t.de
matrix.r13t.de
r13t.de
oc.r13t.de

Certificate

The complete raw certificate details for mta-sts.r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263275716835895919386768406234966768368477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 21:36:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 21:36:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mta-sts.r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853161248714277222850580221502166707677778140280549043943036067318495651758847073337674223055239723634283054885506335976962907119611059120920847134075810607242182083688065853687902396423611167108039739444434653609457250015940113678115287754643716027041109244249440841662024331784874467960328014270226297617034307725231877467578283526487485209454917105464050259286697765088772841499084461151811344074290086963093089527970327774177543490460053160901437487107814385083237228066944463367868431209746579734015568499009872180230620569273502263040103498603504489001723735297813554812969101088141360983009572074108102476613935375655170961173566103200511197378860639478225693503753045609912759787251222169647155196150051956324440328619539407807496771282584648966619900415743501280485853894269673156347058350635858557389789620142896615464714635026988922507033860479617226870786316599639248320856774570195857313754155772888481172373556855077559163636319274137193486807021287590488037069129839696640179348089718101452989316764082151468989182944699563967699311715880478763006932109404283777208357884430022179610390727401839575774872410356312151715488138388111244260053715785021329026429743568483827845462452736388569459989627552062648489654289997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9213ac92cd6d85c4c84a9b2c0543e0adf372845
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.r13t.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.r14t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170efca53eb00000403004830460221008e279f62a5bbb010381cdd40d0d947b593f8f36a9c08e8f07ef944d6e4faafe7022100de44b8f9d8002b5039f8449079cff51e61290d58f93d1f2dd052417990a070f90075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170efca5422000004030046304402201eed852684d3753c30efe2c815e29b3d6d28fff8b78f8e19db98678ba9479e0702200e5f226a4ef30b5792f25f844ac267e493f0b27bc467ec931fde366073cb10dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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