ox-test.strato.de

- Strato AG -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:17:25:64:b1:4f:80:d9:b1:0b:6f:fa:16:4c:5e:15 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:17:25:64:b1:4f:80:d9:b1:0b:6f:fa:16:4c:5e:15
Serial Number (int): 10754005220872174913664420968519196181
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:76:77:67:92:83:c6:ce:7a:5d:95:a6:4c:26:4a:f1:a6:37:95:52
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 45:ee:32:03:de:cb:7e:f2:ee:13:31:38:c7:d3:7c:0a:90:dc:c4:50
Fingerprint (sha256): 4a:e5:e2:5e:78:54:44:22:b9:d7:e3:65:2f:14:08:66:2c:48:0e:70:a8:cd:c1:c9:26:6f:ba:49:ee:8a:ed:bc

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate ox-test.strato.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ox-test.strato.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ox-test.strato.de
communicator-test.strato.de
dav.ox-test.strato.de
share.ox-test.strato.de
dav.communicator-test.strato.de
share.communicator-test.strato.de

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for ox-test.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH1y4witdQ983s5IQITB
XHmaSHqyqMnYcpDGYCBW0EWH+ORz2lCozTm/Zol1CQTqcYGAWIbyLkKPba3KQkt7
5CvMpYSG6Lt50WmPBknA640FuQXKmS4Kk6Pp2eTlNR578wyucH+xlMldLUKwHQ5z
qjIFLx11EU6qasbl/1R/uo9g1KvyVORx47QFR7UEqmTFVSq5KYOH7xTmMVLzto9Y
V0FEqU9L8yIL0hv3nwwSpv2NaWIzBQrM0xclz+Vv0Mic9Dgq61FJ64F/f/y9SSUd
xbPNRsGYfTio4Gpmkv1/+ekBfEXn2DU/cULpCwlGbPH1/dQ22besM+aDzbOuTGCZ
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10754005220872174913664420968519196181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ox-test.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24299615650899440435968644763732098266710488975424958848193914990007222818615676830185483996518818358934796707955018887744573952751688024232602874806856969632074853068078770880721642515720688021543049635285838871044774011231732623255236467715353313521803944131464300973586168156338611055408865975896520415309660304290489388334310043854350416502517004292483905200731993556990793432633996154697857557917482572099994870065092338747603974141101233721123042767597529189618100269610399208894767782847444246686408375544155993364934714664562060466360296249104590701420872580071420323380413872153729916630552500798712239397263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de7677679283c6ce7a5d95a64c264af1a6379552
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ox-test.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator-test.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.ox-test.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.ox-test.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator-test.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator-test.strato.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001771ff4d207000004030047304502200429bf8a3a6543d88e7eabc2dbbe05a5d599a7d489123358cfd176f080fbb7c9022100961d9fe58d53b02d9ec87833960104a09d63623cf8cffac7f4689a41b406e91b0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001771ff4d25e0000040300473045022100f438be2a1be8e19c8223662d6097b3f56b5c7700e621e800d4217a1372043f23022021b65a4a076642ab84f18507f1032e91506b44fb1d2a4d02af681d5002ac72a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab1c6ed28b6d382c2d97812ee29cf776184fbb640402aa176d8847daffeadf37c358a2a27de1ae2f5e0974368cf2b3ebd189fd77617229233cc79586d42a6f5cdd00212fc507a26822013ec712de977daaff372b48ef9994514b6e5e9f7f6213557442ddfc9daa2717921cf8c8d95f2338c76216f56acb183c0dff6da6f72591765941d6e8325576b4d639f8610a0883c084fac2bce41354ac5ea359d108af065c933bd8c5109cfe7c47ef3b42b0c1caaaa62272a396928e775d5fff708c2cf11b9e0678a4f9c0a945a58442c3d38d1efa8eb457660eb493dbb5a1ce2df3abe44bf42a0626f6a9d41fa78b93af57f30621b010db9ad4b657cfea2de91b5194f4