smtp.strato.com

- Strato AG -

Issued by Telekom Security ServerID OV Class 2 CA

About this certificate

This digital certificate with serial number 28:05:05:aa:21:85:a5:01:fa:88:25:02:40:ef:6d:b4 was issued on by Deutsche Telekom Security GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

Deutsche Telekom Security GmbH

Organization: Deutsche Telekom Security GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 28:05:05:aa:21:85:a5:01:fa:88:25:02:40:ef:6d:b4
Serial Number (int): 53195196206899526422666715842835606964
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 28:85:4d:b5:55:bf:97:c7:aa:75:82:71:5d:76:5c:b5:bb:7f:4e:0a
AuthorityKeyId: 1c:05:93:b1:7f:a8:34:30:8c:52:e0:96:40:a0:72:a3:10:5d:e0:ff

Fingerprint (sha1): 0b:cc:26:05:49:84:13:38:95:4c:14:76:64:07:8d:63:d1:63:64:12
Fingerprint (sha256): 2e:f5:32:08:c0:00:a4:b6:a1:2a:a5:2d:fb:5c:e2:fd:ca:1d:92:2c:8f:25:6c:28:77:0c:c7:b7:56:07:ab:95

Issuing Certificate URL: http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt

Revocation information

OCSP Server: http://ocsp.serverid.telesec.de/ocspr
CRL Distribution Point: http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl

Check the revocation status for certificate smtp.strato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smtp.strato.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smtp.strato.com

Other certificates including the domain name strato.com

(limited to 100 certificates)
webmail.strato.de
*.s3.hidrive.strato.com
ftp.hidrive.strato.com
api.hidrive.strato.com
*.strato.com
*.webdav.hidrive.strato.com
ftp.hidrive.strato.com
www.hidrive.strato.com
hidrive.strato.com
*.webdav.qsdrive.strato.com
hidrive.strato.com
mx.hidrive.strato.com
smtp.strato.com
backup.strato.com
webdav.qsdrive.strato.com
registrar.strato.com
webdav.hidrive.strato.com
pop3.strato.de
imap.test.strato.de
news.strato.com
*.s3.hidrive.strato.com
www.hidrive.strato.com
*.strato.com
news.strato.com
diag.hidrive.strato.com
*.shop.strato.com
developer.qsdrive.strato.com
api.hidrive.strato.com
www.hidrive.strato.com
webdav.qsdrive.strato.com
imap.test.strato.de
news.strato.com
api.hidrive.strato.com
backup.strato.com
smtp.strato.com
webdav.hidrive.strato.com
hidrive.strato.com
www.hidrive.strato.com
webdav.hidrive.strato.com
smtp.strato.com
*.strato.com
webdav.hidrive.strato.com
imap.test.strato.de
*.webdav.hidrive.strato.com
backup.strato.com
diag.hidrive.strato.com
webdav.drive.strato.com
webdav.hidrive.strato.com
www.qsdrive.strato.com
backup.strato.com
pop3.strato.de
webdav.hidrive.strato.com
api.hidrive.strato.com
imap.test.strato.de
hidrive.strato.com
news.strato.com
*.strato.com
smtp.test.rzone.de
news.strato.com
imap.strato.de
imap.strato.de
api.hidrive.strato.com
pop3.strato.de
webmail.strato.de
hidrive.strato.com
hidrive.strato.com
provisioning.hidrive.strato.com
*.strato.com
webmail.strato.de
imap.strato.de
*.strato.com
api.hidrive.strato.com
imap.strato.de
imap.test.strato.de
mx.hidrive.strato.com
news.strato.com
com4.strato.de
pop3.strato.de
smtp.strato.com
pop3.strato.de
*.s3.hidrive.strato.com
webmail.strato.de
hidrive.strato.com
*.ep7test.strato.com
*.ep7test.strato.com
webmail.strato.de
www.hidrive.strato.com
webdav.hidrive.strato.com
imap.strato.de
www.hidrive.strato.com
*.webdav.hidrive.strato.com
smtp.strato.com
api.hidrive.strato.com
pop3.strato.de
hidrive.strato.com
api.hidrive.strato.com
pop3.strato.de
news.strato.com
sfm.hidrive.strato.com
api.hidrive.strato.com

Certificate

The complete raw certificate details for smtp.strato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqNclnrMUQPY+azvBDbQ
seTokSgnAHbhoADz1cun4tcirZ42OtW5xDEgd35mofNb04zopTa29VvZ/CsjZtKA
ZZY8/SEgkGqUuU1MLqqgKyCwCq8PpMeyrwykDegt862lPXpcOifhEl2cR+b0fMw/
MNjNxZOjAeAvJq/I5NG37qOASQWI4fsRAlcr/YArTiT6zlj33B4jW0yT0FvgB+lc
P+hhTeQkxeOhbKrns5jCZqeCxV746O+Biq8yR1sRfz9Ap1Xc8Ma0Fr70bV1dLcp3
XeMeOjkxfzS71z7HxXKcWFvb7l+tJeeCvRQVfFgcpWFapwhP66d8CbljSW2suloJ
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53195196206899526422666715842835606964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Telekom Security GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telekom Security ServerID OV Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 11:22:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smtp.strato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25580694245569019793394474485200047216027619506519673877729342080675771937453547604636659657013792283432249081819043242210077486921150840327003425077014837423489452850139852986140064714056977923219074229158049574403496787683687709001284774485465424124571677964170755943129915033969115078005696325786375997501216162588595134825771970821331496424204065065440508630434694919486471327595538819778201570140916287218071905553446091905682496821238337262203843321958139456971955481948595321582020863354265286597715976905025425858533760732282222249057510041745184052338824884094899705041180279388145990256261121593347745122613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c0593b17fa834308c52e09640a072a3105de0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28854db555bf97c7aa7582715d765cb5bb7f4e0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://docs.serverid.telesec.de/cps/serverid.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverid.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		00b8f12a09cfa440d095182a244d14951a71f34d44c58f7405b182deddd347fde63e949f64c843047e3732638b6b4b268ba56157c589c84edbf8281ff557d9c16c7f2f388fdc8fadf7e391b8d1b4bc08e025ade9bab481dbe30b7446c8765a2e25ddfb23e7502ffcb2d8ca5827d2219c982177a82b0e431edc5a7d34a60784b2a2ba20e52ca1332abe9cf87748871817dbc881a39c0cfb6bdb8c2fbaecf8136ee6fd73d89c8cd6b2204ff90707202b8ce4f2c34b47cf9f32f8e0b7e7c131289b82fbf15b98a3a44bbcb9e22069637807e359672054bb803cb364a37f938533135925f33415833fff37324a34537ac847cc237ca27300e079fbd5081766bfd5ca95f50e91114b42b201a1d9a73a1f04df9bfbc483e50c368d93de5bcc985cfafa2dd35f1bf83bafaedb31fa28667406221bbc343ae3592b1458a1cecf2799ae67cefb3edd34d8c7c84e3396b181a9ad7195f745c23c4050753e733e2d3aa2054b675c843dca94337afd77a9f18b8efd54bbd9fc28684b4c220e125779be46b02141