mailgw.steinberg.de

- Steinberg Media Technologies GmbH -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 1d:df:7a:65:f2:fb:22:5d:97:85:f4:f3:0d:fb:f4:12 was issued on by StartCom Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Steinberg Media Technologies GmbH

Organization: Steinberg Media Technologies GmbH
State / Province: Hamburg
Locality: Hamburg
Country: DE

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:df:7a:65:f2:fb:22:5d:97:85:f4:f3:0d:fb:f4:12
Serial Number (int): 39707976608430861364277321115694265362
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 52:d8:93:c5:dd:d6:50:58:b0:d1:7e:bb:2e:96:04:5d:51:0f:a7:d5
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51

Fingerprint (sha1): 61:3b:65:87:5a:10:32:3f:bc:27:08:59:17:dd:73:08:86:ea:07:59
Fingerprint (sha256): 2f:54:b0:dd:97:36:f8:fd:e8:dd:d1:1c:50:c8:7b:c7:74:eb:0a:06:7f:3e:85:72:b9:62:02:0a:32:75:74:02

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate mailgw.steinberg.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailgw.steinberg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailgw.steinberg.de
mail.steinberg.de

Other certificates including the domain name steinberg.de

(limited to 100 certificates)
helpcenter.steinberg.de
traveler.steinberg.de
newbouncer.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
traveler.steinberg.de
www.steinberg.de
*.steinberg.de
mailgw.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
testrail.steinberg.de
www.steinberg.de
insektarium.steinberg.de
www.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
helpcenter.steinberg.de
helpdesk.steinberg.de
helpdesk.steinberg.de
*.steinberg.de
videoconf.steinberg.de
confluence.steinberg.de
testrail.steinberg.de
webmail.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
www.steinberg.net
melitta.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
confluence.steinberg.de
sts.steinberg.de
srv-ftp2.steinberg.de
newbouncer.steinberg.de
insektarium.steinberg.de
confluence.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
sts.steinberg.de
newbouncer.steinberg.de
helpcenter.steinberg.de
easypeasy.steinberg.de
*.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
webcon.steinberg.de
*.steinberg.de
webmail.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
helpcenter.steinberg.de
*.steinberg.de
memoq.steinberg.de
*.steinberg.de
ensicaen.steinberg.de

Certificate

The complete raw certificate details for mailgw.steinberg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39707976608430861364277321115694265362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 20:51:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 20:51:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Steinberg Media Technologies GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mailgw.steinberg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715227765750277996736714272916723279357351209073004868002954421117049848048890761079147092825743044642599579923823294904185427454419038144161706012958933069163494873620109877575684354381901276701981804391482534490688644777978404587894990529148246569487174217168627419150082204064961762565842807123417828545871047827205454799468287106922024283070905698737998090455024184849690480782713056456684170187516399029650322700006031698444514441860763098587818946831790208323775312839695746396401256942333865307233199101465010969411090899734125831350770830073233392431128633218163323942099925884842906795532775335434410522618209505535855083914030840560640438649890282847194788113320894598112968344730374995186609542917171783265408685475806237127346678038808187653688412498916671597743528088761319551593977375926409322014907506870379011587072338379217874323780996045573289671500600465982297917078651961967717437765437877937403511010915150427983167681455564648351505088663906798015105066894022092464323153089749588201856073215328210932694667486385785850409703905287943708707029219472693411154928081243954781267944695914963037604790049722402487122193980016565536963405317246963767332466337921950535400155274830556206304400784241896016731470892309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52d893c5ddd65058b0d17ebb2e96045d510fa7d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgw.steinberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.steinberg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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