webmail.tekom.de

Issued by SwissSign Server Silver CA 2014 - G22

About this certificate

This digital certificate with serial number 4a:63:ce:2d:d9:81:c5:c4:00:b8:d1:e5:21:95:29:ea:0e:26:fb:bf was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.tekom.de

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:63:ce:2d:d9:81:c5:c4:00:b8:d1:e5:21:95:29:ea:0e:26:fb:bf
Serial Number (int): 424691051548343403081017686352416147230276647871
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 1c:90:7b:97:e9:a3:d9:53:61:f1:f9:93:6b:b1:84:52:cf:8e:e1:06
AuthorityKeyId: db:bc:bf:82:18:59:dc:69:fa:f8:ab:aa:83:4d:77:1d:0b:b0:8b:d8

Fingerprint (sha1): ed:2a:bd:c0:ce:1f:9c:d4:b8:19:de:49:0b:76:bf:b0:21:f4:e7:5f
Fingerprint (sha256): 43:9e:9f:33:27:ac:95:5b:82:31:f7:c3:a4:be:ca:98:23:14:18:ec:fa:19:b0:7f:58:f2:b6:ee:5f:57:33:04

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8

Revocation information

OCSP Server: http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8
CRL Distribution Point: ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate webmail.tekom.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.tekom.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.tekom.de

Other certificates including the domain name tekom.de

(limited to 100 certificates)
www.tekom.de
app.reelertech.com
tagungen.tekom.de
statistik.tekom.de
www.tekom.de
www.tekom.de
cafe.tekom.de
mobil.tekom.de
mobil.tekom.de
mobil.tekom.de
www.tekom.de
conferences.tekom.de
bride.tekom.de
live.tekom.12bis3.de
martbhiadmin.estore.business
tagungen.tekom.de
develop.tekom.de
conferences.tekom.de
www.bambumeta.io
mobil.tekom.de
www.tekom.de
conferences.tekom.de
mobil.tekom.de
www.tekom.de
cloud.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
umfrage.tekom.de
statistik.tekom.de
www.ngoan-streetfood.de
openx.tekom.de
conferences.tekom.de
webmail.tekom.de
umfrage.tekom.de
www.tekom.de
autodiscover.tekom.de
conferences.tekom.de
www.tekom.de
bride.tekom.de
mobil.tekom.de
webmail.tekom.de
jira.tekom.de
iirds.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
iirds.tekom.de
autodiscover.tekom.de
statistik.tekom.de
www.tekom.de
develop.tekom.de
cloud.tekom.de
www.tekom.de
openx.tekom.de
conferences.tekom.de
mobil.tekom.de
develop.tekom.de
iirds.tekom.de
webmail.tekom.de
conferences.tekom.de
develop.tekom.de
conferences.tekom.de
www.tekom.de
tagungen.tekom.de
umfrage.tekom.de
link.how.fm
iirds.tekom.de
umfrage.tekom.de
develop.tekom.de
umfrage.tekom.de
tagungen.tekom.de
openx.tekom.de
tagungen.tekom.de
jira.tekom.de
conferences.tekom.de
cafe.tekom.de
visilaw.com
tagungen.tekom.de
openx.tekom.de
jira.tekom.de
www.tekom.de
statistik.tekom.de
tagungen.tekom.de
statistik.tekom.de
mobil.tekom.de
app.ventract.com
iirds.tekom.de
www.tekom.de
webforum.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
tagungen.tekom.de
www.racetime.app
conferences.tekom.de

Certificate

The complete raw certificate details for webmail.tekom.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DxnmLQwT2BWXFdUualu
S77RnadFvQo9tKt31H+B1Mj5gox8d62286AxdxW48O5FuOExetgk7JpokTokpTA/
W3MTBLpWvj3gcavpnjbwGbiguhBSe5FFiPtZtgTgD7UudFDSjQlKUK7xKI5jUbtU
f2UyMN3ONnb6QvIZq2jrHSIPGbvxkXKmYM62NA4CXM7+OhFmnIPjI1uoWBTbkzEr
szygfKq6MsBWFR25FX+DkXMJzNghJ7vFj1bghn3C5XHqw85EuwuxaYOgB591fHYz
6E52vsGbMWUUuXZ2eg6xVXXLckAI7eeETmE++hzHZu8wSxoiQE9wkZPhQ79nq5nF
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424691051548343403081017686352416147230276647871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Silver CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 15:08:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 15:08:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.tekom.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28812120187088805786204324984025035250498149274786629192540840837783580286571246470179056621462137103738381561556435396223893092268851696521053660340422747006819700106690915513959538978137832281493500903611305838376537699864151846628102139381840303227918298800482209044200118506390580679476461980139834906230590439548849413999117814130775066409331469026639890130701067635139697183651977719873406549912799717204408943688585200795623495958208621126975283297198242147937450649296034993287335872258693081172384394286626539396534353543862475372920382046991380678015394005411443957555797617714515503344181395899299002959229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tekom.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c907b97e9a3d95361f1f9936bb18452cf8ee106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbbcbf821859dc69faf8abaa834d771d0bb08bd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.3.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Silver-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://silver-server-g2.ocsp.swisssign.net/DBBCBF821859DC69FAF8ABAA834D771D0BB08BD8'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d1bb81a930000040300473045022100b74befa52c76c9a81a49893a1a41af586520c202d1f74ae3607e092daa55180902201f63609170a53445e27b67f04c6e64d503f25ad7cb2fb1bf22f7825a6a5f713d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d1bb81b4f0000040300473045022100d0b28585003c7ebd26b07a916dba57a000a322a21700230315a00f43981ea32202203849789105ca3d3168cf0c6a3b03a5a96ce51e8032695c8ca8a5e03930b72a8a007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d1bb81c640000040300463044022051f15d712be270f0a54c1569e43453313e5e94d9c45c12508acd793c6b211c5e02200190115b4856b51f5433e24e55afbbd4d774e4c1fcf10c07912503dc21a36d89007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d1bb819a6000004030046304402203bf1c8bb975f1fa80734917cc5bcd3b13a60d65b627b5b3be3dbe4fe5a89b3d402202f39ae64f3bfd2a91d49212c68cde5ec1ca1191496784e24a9b7e9b0303ceae1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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