*.in.strato.de

- Strato AG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 11:16:75:2c:1b:b7:13:25:c4:be:26:3d:07:04:19:f0 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Strato AG

Organization: Strato AG
Organization unit: Office IT
State / Province: Berlin
Locality: Berlin
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:16:75:2c:1b:b7:13:25:c4:be:26:3d:07:04:19:f0
Serial Number (int): 22713482995771533032098156853957237232
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 5a:d2:21:68:54:56:5c:e3:7b:ed:6c:20:e4:9d:f7:6c:cd:21:fe:85
Fingerprint (sha256): 57:79:96:22:26:10:5a:22:bd:d2:d3:4d:07:a1:dc:68:3f:c0:53:8a:b1:d8:e4:99:27:c5:0a:f8:ff:e9:8b:67

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.in.strato.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.in.strato.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.in.strato.de

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for *.in.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22713482995771533032098156853957237232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Office IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.in.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918610971273753557988628425062389348671953958403881482603779137304576503152384330965139871201318978200987107926728430630714809629332099849322619780484973661371671282623859811833459200145674591106553378537395647154304616571316110995252642231335132025009917428169552156540784705229780984323154160234181213976443139698266368306897029299926042271752649523461773230575828859244756885869889215328565238835645532004938941101971165692712082035129909956821390320208772651422394777481131715186037427604692554291477065067049141951009462706006715454508875797729379562514861311015417047307104563535772469402957896066645143389320415696564258928498633916506545250028461012057532163106599789433792416677582738890164605388917443117319987983039453083123318001470806016590658128482521679185701915310807998486072742893830985425087723697222115359065576994417876225321829606332927135063353558721750944725849570896960066936508525179376332716500720940150710755047350314449730766970961063667194009118331219304702868394441527127089929294257111614068283932140530420736134231266292740720689803559588237074659632698831272934440576066029264056354823332502495233384160627007964832302648625281495140974037563730995195463799982945761483907584128917435179987824187113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.in.strato.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001540cb3fa9d000004030046304402206031e8a8f94260e6d692414a090e628330d53078fc5bd56405ba50544c4161ad02200a8bcd4bd3d5d98b2a5345b4563e86fcc4759d442cf1d9017b2427b52f5ea7f7007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001540cb3fad4000004030046304402203387a3b06b4ae4f56ec7117aa14fbb8c8c958b7c1b4adda123ae4eeb3aeaa5a102203c3f89fbc236cd8c7199fd16b5e8d04ffc1daf958e83b7f2ef383423b0312a1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00209202dc842e3898e924a474c8a748fd7852b8ebb931adf9f1cea40915c5f7aae7f67dab6f3b1b0d0766903330e2a78cf128d7f710060dfd9b9d05dab99b72a87ab579777fbabdcddf9a8161fc5e67ce831ad7c9fddbf365cedc134388d216fdc773862a3aa421737b960c2d09d738a14acdf59362df1a3a3bb1adbc7960d6519d32df84bcded2a99f922070edc4815048040fe4ae91da3fe0cfc98a36446480ae767b1838d1add11c1ca7395e1f6de3e5d7eef23b2ec0e0224b977d64f6fea1ba71fcb89f59042334c631cb50d5db7fb524196f6fb4098123a7de2d8f50109e8b2b131f291a03ec84a6cccc65c870abbde44bf6daf47b0281bca1483b0b8fd8