webmail.strato.de

- Strato AG -

Issued by Telekom Security ServerID OV Class 2 CA

About this certificate

This digital certificate with serial number 25:b5:d7:bc:3a:f9:ee:5e:20:1f:39:b8:70:91:b3:94 was issued on by Deutsche Telekom Security GmbH.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

Deutsche Telekom Security GmbH

Organization: Deutsche Telekom Security GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 25:b5:d7:bc:3a:f9:ee:5e:20:1f:39:b8:70:91:b3:94
Serial Number (int): 50125617206648307647295052063865680788
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: fc:b5:e8:8f:2b:fd:ed:20:52:89:68:e8:42:43:26:c1:22:36:4f:0b
AuthorityKeyId: 1c:05:93:b1:7f:a8:34:30:8c:52:e0:96:40:a0:72:a3:10:5d:e0:ff

Fingerprint (sha1): 99:71:dc:5e:59:bd:94:7b:e4:cc:b0:3c:af:0a:75:12:5c:17:2c:ae
Fingerprint (sha256): 57:5a:a6:5f:bd:6e:cb:72:45:66:f8:62:bb:90:bd:c1:37:b7:d3:22:cb:29:7c:fe:5e:8e:8e:4f:ac:da:c1:c6

Issuing Certificate URL: http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt

Revocation information

OCSP Server: http://ocsp.serverid.telesec.de/ocspr
CRL Distribution Point: http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl

Check the revocation status for certificate webmail.strato.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.strato.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.strato.de
dav.webmail.strato.de
share.webmail.strato.de
webmail.strato.com
dav.webmail.strato.com
share.webmail.strato.com
communicator.strato.de
dav.communicator.strato.de
share.communicator.strato.de
communicator.strato.com
dav.communicator.strato.com
share.communicator.strato.com
com4.strato.de
com4.strato.com

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for webmail.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0SMyg+3JyLigSvaj6ZO
tUF4y0PHY/FvLqI+OdnI5kgGR/R4Xbz+fCEsVbO6gAB+XEbtcT7G4J5ZOL58FVp9
yVmNs39JvRVzlFAuHURk1tF0LsiEUgMMXNNizQrdAW+P4fl0SyGZ5g62fsG8AS6I
NSVitZ1DAtuE5NOpbY5W4yrtwmYEFhL10b9nqCa0bZWAC/hKkqnIXPRUUbWfe0RE
2fK4hhA29jDMwNCGFOEqtt7AxSQ2b7634SzXfdQRU3W3xN9ASo4bimlSbM1R9UwR
qUwfk0G3GB3U40dFPIfOh/HseMWaJwt6/5XOImloRjaetU7KhGfM7LbcvECPHDoc
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50125617206648307647295052063865680788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Telekom Security GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telekom Security ServerID OV Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 10:57:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19095787294133407222781515273276552710597067743798610281055157167296303454663409001451697659604610152914926523084030590524397518449501535569806613739864285704777544023167054273753596843478864686460306093723933585254224143603483173211627486117561405780509165779798804294855561289391148839712665683415913156949507684994734140034017061324766192501653077752600847001141610084488982115855202887262917038461322804904418622726064576912033425037246026820497205213436196456358659823325126696686161922233292052052373867546177296607041878039762107444287255948282295120516327796024155926211002927779207428433660253394027373272189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c0593b17fa834308c52e09640a072a3105de0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcb5e88f2bfded20528968e8424326c122364f0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://docs.serverid.telesec.de/cps/serverid.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverid.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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