*.s3.hidrive.strato.com

- Strato AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 08:a5:e8:aa:7b:b1:dd:d5:f2:9f:5f:f0:2b:d4:ad:97 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
Organization unit: Rechenzentrum
Locality: Berlin
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a5:e8:aa:7b:b1:dd:d5:f2:9f:5f:f0:2b:d4:ad:97
Serial Number (int): 11495271974034931822142967513739472279
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:6b:44:36:1a:48:36:fe:5d:c2:22:18:35:30:cf:70:55:9c:cc:e5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 74:92:61:c2:44:7d:fe:b0:22:b3:a9:1e:e1:fc:80:37:6e:cf:9d:5d
Fingerprint (sha256): 69:55:d8:5a:90:f3:57:5a:3d:c9:ba:fa:47:88:a2:4f:04:94:6a:5c:a5:00:71:78:ef:03:c1:5b:a4:d4:a4:fd

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.s3.hidrive.strato.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.s3.hidrive.strato.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.s3.hidrive.strato.com
s3.hidrive.strato.com

Other certificates including the domain name strato.com

(limited to 100 certificates)
webmail.strato.de
*.s3.hidrive.strato.com
ftp.hidrive.strato.com
api.hidrive.strato.com
*.strato.com
*.webdav.hidrive.strato.com
ftp.hidrive.strato.com
www.hidrive.strato.com
hidrive.strato.com
*.webdav.qsdrive.strato.com
hidrive.strato.com
mx.hidrive.strato.com
smtp.strato.com
backup.strato.com
webdav.qsdrive.strato.com
registrar.strato.com
webdav.hidrive.strato.com
pop3.strato.de
imap.test.strato.de
news.strato.com
*.s3.hidrive.strato.com
www.hidrive.strato.com
*.strato.com
news.strato.com
diag.hidrive.strato.com
*.shop.strato.com
developer.qsdrive.strato.com
api.hidrive.strato.com
www.hidrive.strato.com
webdav.qsdrive.strato.com
imap.test.strato.de
news.strato.com
api.hidrive.strato.com
backup.strato.com
smtp.strato.com
webdav.hidrive.strato.com
hidrive.strato.com
www.hidrive.strato.com
webdav.hidrive.strato.com
smtp.strato.com
*.strato.com
webdav.hidrive.strato.com
imap.test.strato.de
*.webdav.hidrive.strato.com
backup.strato.com
diag.hidrive.strato.com
webdav.drive.strato.com
webdav.hidrive.strato.com
www.qsdrive.strato.com
backup.strato.com
pop3.strato.de
webdav.hidrive.strato.com
api.hidrive.strato.com
imap.test.strato.de
hidrive.strato.com
news.strato.com
*.strato.com
smtp.test.rzone.de
news.strato.com
imap.strato.de
imap.strato.de
api.hidrive.strato.com
pop3.strato.de
webmail.strato.de
hidrive.strato.com
hidrive.strato.com
provisioning.hidrive.strato.com
*.strato.com
webmail.strato.de
imap.strato.de
*.strato.com
api.hidrive.strato.com
imap.strato.de
imap.test.strato.de
mx.hidrive.strato.com
news.strato.com
com4.strato.de
pop3.strato.de
smtp.strato.com
pop3.strato.de
*.s3.hidrive.strato.com
webmail.strato.de
hidrive.strato.com
*.ep7test.strato.com
*.ep7test.strato.com
webmail.strato.de
www.hidrive.strato.com
webdav.hidrive.strato.com
imap.strato.de
www.hidrive.strato.com
*.webdav.hidrive.strato.com
smtp.strato.com
api.hidrive.strato.com
pop3.strato.de
hidrive.strato.com
api.hidrive.strato.com
pop3.strato.de
news.strato.com
sfm.hidrive.strato.com
api.hidrive.strato.com

Certificate

The complete raw certificate details for *.s3.hidrive.strato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCdFtVsNdmh6DYQurtvp
nzOq4avT3a9tESCh4ZErCYaWh60kysi7y7+2L/UjFfwJbAmjBCwRC5M33JmDmRqx
Z5RZ3KVzZt0Vfc43T2qnK6oLZs//zzvPfklpoB0z4FqLPBYbPYkxVbAXIKzLnqb8
vAblI59ZWpi12jLOCtgmOmI8dHmOE9ETqJYGZuTE0CqiduhYvYPnm/iCPxrGrpUt
atu/rvkxlNlC9gRIUxOEjD66p5v1lDAigslZ6P1E+awIBKZFfsHKLnDiVyWsfAVe
mp52c2dX8kGlDrjTT7ER7MIk8NBoEENz3cbgBZN1fCPd7EHaSr4oeS56z+BEILNI
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11495271974034931822142967513739472279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.s3.hidrive.strato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25267026885387624972447587039211448805940283929994600360821378610704838919677406129321637129048443883237276088533578723765797380875237199556294883322288900240648454700143978475973367930046647904697374490034209622332553079215499354441595199885804789268120281045101494006489257620473445232911361918870157894449438908710157270791044627917077788320103270435994004896618659213073127184693372215466148731738550711721222591404149647730660410790686554837783413397584095368318868659003906911495346927468585492401180368179015004024125082323695098515796645221482532185482545921991013724030918377422515715523607928474440192706571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c6b44361a4836fe5dc222183530cf70559ccce5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.hidrive.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.hidrive.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a8f6e5120052533cb6d78e2111f73543e7fb9f5864eb59772a50f87dba316f24df42f97712b2df2659fb955ae440f9244973adf3f9d61984b7bc3f615698c285462c1b38abd00a62099cf3a0813ffdd97050fdeb355dde4a155100bddfc6707b3df552fe4790c11116d95ce07f1946696dbb7df4c8588f6e55fa066d8afa56ebcf8307703032a0d37adba83e681b74f35532cc06e4e042216ade06ec3cafacb3769ff402a461a68008df1ec857a85d3b8b76c5cb11e27644c3c9e81a14f63d99d7b73cbfb2983bead6fff5bfa3225da631243be73d3d4818f1403e93dd6e869165406013743666681daa7ff34a03faefc6fe931ab888992cfa974e3163efdda