mx.activemail.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:3c:3b:2e:b1:3a:e3:c2:c0:43:94:d2:ef:31:99:68:8d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mx.activemail.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:3c:3b:2e:b1:3a:e3:c2:c0:43:94:d2:ef:31:99:68:8d
Serial Number (int): 321646897712581048489511375824246009325709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:9b:de:a1:5f:40:f1:38:99:75:4e:63:6d:48:81:a4:6f:3f:2d:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:f5:15:30:b9:d4:c9:47:ad:4e:c1:5f:ed:24:50:4f:08:42:c3:74
Fingerprint (sha256): 51:22:b8:f0:fa:06:57:3e:df:ed:f9:c0:4e:b0:2d:fa:fb:1d:35:b8:11:88:6a:8e:ec:2e:8f:87:47:74:c0:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mx.activemail.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx.activemail.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mx.activemail.de

Other certificates including the domain name activemail.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mx.activemail.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321646897712581048489511375824246009325709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 06:50:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-28 06:50:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx.activemail.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856213727775758424539234806141135489738481799712426125359508786103078731157435223197896869983899167386551552297922195109580007765618188962122397276929295365183862641322174734683230920649886676476270263454772075067070981423705981465191886392897466782548958545441276765770993657302950555846310425560723772140812509558273979289706430622731784776362921243893081368989665783503239878827960582643918892254211287655773381907895438576067990564155051673482943556992093258596891748544288107109279928120356369306170565589626254295531557806390417475533511281730095804601191032397197754191922396559945773650475001684215836537803339854663717812806331298708202105878560196131612569080108980362255357874453376293324476869150376540533209585427529235669759808154945769738708414598028047527267267048780206738363081456264175721834056557667168161930396901402426498822544918816201981267786070133861606879732018755291658049597688303269258392287324019144222064418829827508549659228230929565374398539060688824801227316199330036706171479625887177065483951260731400801798687914921572576510608380797936423355213237906967446124141561704461720389751367128682893718017680579354138037010944190498957219559447159829748214037359047439793465890717698576345297409046557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							529bdea15f40f13899754e636d4881a46f3f2de2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.activemail.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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