webmail.albis-elcon.com

- albis-elcon system Germany GmbH -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:65:87:ec:0b:8c:94:b8:ac:7c:75:ff:60:27:d6:d1 was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

albis-elcon system Germany GmbH

Organization: albis-elcon system Germany GmbH
State / Province: Sachsen
Locality: Hartmannsdorf
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:65:87:ec:0b:8c:94:b8:ac:7c:75:ff:60:27:d6:d1
Serial Number (int): 20465598746202889065579747910558930641
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:28:0a:06:74:e2:f9:9e:97:2e:0c:7c:e0:e5:f3:9a:3d:a2:11:21
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 7c:74:49:87:60:8f:ae:2c:c5:4d:15:62:d0:b0:50:6e:92:80:45:ac
Fingerprint (sha256): 30:dd:a9:4b:be:94:f7:55:df:8d:a9:3d:42:a1:27:a3:a9:15:5e:29:76:ce:6f:88:bf:a1:11:3f:50:e8:8c:85

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate webmail.albis-elcon.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.albis-elcon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.albis-elcon.com
autodiscover.albis-elcon.com
autodiscover.albis-engineering.com
autodiscover.elcon-system.com
autodiscover.elcon-system.de
autodiscover.letron-electronic.com
autodiscover.newtal.de
autodiscover.sectrace.me
autodiscover.suconi.com
autodiscover.uet-group.com
eihp-ks2.elcon-system.de
webmail.elcon-system.com
webmail.elcon-system.de

Other certificates including the domain name albis-elcon.com

(limited to 100 certificates)
go.albis-elcon.com
www.elcon-system.com
webmail.albis-elcon.com
meetme.albis-elcon.com
go.albis-elcon.com
*.albis-elcon.com
go.albis-elcon.com
www.elcon-system.com
*.albis-elcon.com
meetme.albis-elcon.com
webmail.albis-elcon.com
go.albis-elcon.com
go.albis-elcon.com
*.albis-elcon.com
www.elcon-system.com
www.elcon-system.com
snts.albis-elcon.com
www.elcon-system.com
go.albis-elcon.com
*.albis-elcon.com
www.elcon-system.com
www.elcon-system.com
webmail.elcon-system.com
www.elcon-system.com
go.albis-elcon.com
jabber.albis-elcon.com
jabber.albis-elcon.com
*.albis-elcon.com
www.albis-elcon.com
www.elcon-system.com
go.albis-elcon.com
webmail.elcon-system.com
meetme.albis-elcon.com
go.albis-elcon.com
mx1.albis-elcon.com
webmail.elcon-system.com
go.albis-elcon.com
www.albis-elcon.com
webmail.albis-elcon.com
www.elcon-system.com
webmail.elcon-system.com
go.albis-elcon.com

Certificate

The complete raw certificate details for webmail.albis-elcon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20465598746202889065579747910558930641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartmannsdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'albis-elcon system Germany GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.albis-elcon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662497065800943657904678844616179305050631942916198075782092954562143611653352681731444112640174687709055886658361170081243284364119751286775821310330562152456788409642303498432154569795683514194451574083768301819279101246947249499808361376280743410876595252975050586529834349940124429580497633978001724519722591520507665752304602638019063122577085782246767483701878462812184297246369225368051156813433366568575121025974702678915963082495257747072004117811299528458868839015817405687490032049935716285419449651854446071888748281150126726836972966877629978453081550021158463590322846795354214299708136692042843358764718095925953250000842532459046034230901255772771508668552720589398956580172200479960300287718461002412468466153887582511372683987989054932858873862653301184717811650747042630668665970050261281532025950017461887434710637642283557573929438181790683854145059132549857798493832625128522160823632816536189770174553506883003368299589988299535625705417079699803482414972355729018620112109728057382745555257413475712878209697415302861408848743904155259754906793162781727448476080026807592366413956367721020231442220605847218990578599731455164678143067696119173671206940104812893016558663986408538655075388889283668399373843739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97280a0674e2f99e972e0c7ce0e5f39a3da21121
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.albis-elcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.albis-elcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.albis-engineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.elcon-system.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.elcon-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.letron-electronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.newtal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sectrace.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.suconi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.uet-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eihp-ks2.elcon-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.elcon-system.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.elcon-system.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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