webmail.strato.de

- Strato AG -

Issued by Telekom Security ServerID OV Class 2 CA

About this certificate

This digital certificate with serial number 0d:fe:bd:af:3f:ae:71:43:91:c8:80:ee:f7:d5:71:8a was issued on by Deutsche Telekom Security GmbH.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
State / Province: Berlin
Locality: Berlin
Country: DE

Deutsche Telekom Security GmbH

Organization: Deutsche Telekom Security GmbH
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:fe:bd:af:3f:ae:71:43:91:c8:80:ee:f7:d5:71:8a
Serial Number (int): 18602654607323726312572332661150151050
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:b5:e8:8f:2b:fd:ed:20:52:89:68:e8:42:43:26:c1:22:36:4f:0b
AuthorityKeyId: 1c:05:93:b1:7f:a8:34:30:8c:52:e0:96:40:a0:72:a3:10:5d:e0:ff

Fingerprint (sha1): b7:06:df:d3:32:d4:ae:d1:02:84:21:a1:d7:31:d6:aa:9c:4a:33:ab
Fingerprint (sha256): 69:5b:e9:bb:9f:2f:2a:a6:ba:17:3d:bb:71:f8:4b:24:df:8e:e8:81:53:77:09:b3:fc:2c:ad:24:29:33:04:ba

Issuing Certificate URL: http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt

Revocation information

OCSP Server: http://ocsp.serverid.telesec.de/ocspr
CRL Distribution Point: http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl

Check the revocation status for certificate webmail.strato.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.strato.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.strato.de
dav.webmail.strato.de
share.webmail.strato.de
webmail.strato.com
dav.webmail.strato.com
share.webmail.strato.com
communicator.strato.de
dav.communicator.strato.de
share.communicator.strato.de
communicator.strato.com
dav.communicator.strato.com
share.communicator.strato.com
com4.strato.de
com4.strato.com

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for webmail.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJgTCCB+mgAwIBAgIQDf69rz+ucUORyIDu99VxijANBgkqhkiG9w0BAQsFADBo
MQswCQYDVQQGEwJERTEnMCUGA1UECgweRGV1dHNjaGUgVGVsZWtvbSBTZWN1cml0
eSBHbWJIMTAwLgYDVQQDDCdUZWxla29tIFNlY3VyaXR5IFNlcnZlcklEIE9WIENs
YXNzIDIgQ0EwHhcNMjMwMjIxMTExNzA1WhcNMjQwMjI1MjM1OTU5WjBfMQswCQYD
VQQGEwJERTESMBAGA1UEChMJU3RyYXRvIEFHMQ8wDQYDVQQIEwZCZXJsaW4xDzAN
BgNVBAcTBkJlcmxpbjEaMBgGA1UEAxMRd2VibWFpbC5zdHJhdG8uZGUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRIzKD7cnIuKBK9qPpk61QXjLQ8dj
8W8uoj452cjmSAZH9HhdvP58ISxVs7qAAH5cRu1xPsbgnlk4vnwVWn3JWY2zf0m9
FXOUUC4dRGTW0XQuyIRSAwxc02LNCt0Bb4/h+XRLIZnmDrZ+wbwBLog1JWK1nUMC
24Tk06ltjlbjKu3CZgQWEvXRv2eoJrRtlYAL+EqSqchc9FRRtZ97RETZ8riGEDb2
MMzA0IYU4Sq23sDFJDZvvrfhLNd91BFTdbfE30BKjhuKaVJszVH1TBGpTB+TQbcY
HdTjR0U8h86H8ex4xZonC3r/lc4iaWhGNp61TsqEZ8zstty8QI8cOhx9AgMBAAGj
ggWuMIIFqjAfBgNVHSMEGDAWgBQcBZOxf6g0MIxS4JZAoHKjEF3g/zAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQW
BBT8teiPK/3tIFKJaOhCQybBIjZPCzBTBgNVHSAETDBKMEgGBmeBDAECAjA+MDwG
CCsGAQUFBwIBFjBodHRwOi8vZG9jcy5zZXJ2ZXJpZC50ZWxlc2VjLmRlL2Nwcy9z
ZXJ2ZXJpZC5odG0wXgYDVR0fBFcwVTBToFGgT4ZNaHR0cDovL2NybC5zZXJ2ZXJp
ZC50ZWxlc2VjLmRlL3JsL1RlbGVrb21fU2VjdXJpdHlfU2VydmVySURfT1ZfQ2xh
c3NfMl9DQS5jcmwwgZ8GCCsGAQUFBwEBBIGSMIGPMDEGCCsGAQUFBzABhiVodHRw
Oi8vb2NzcC5zZXJ2ZXJpZC50ZWxlc2VjLmRlL29jc3ByMFoGCCsGAQUFBzAChk5o
dHRwOi8vY3J0LnNlcnZlcmlkLnRlbGVzZWMuZGUvY3J0L1RlbGVrb21fU2VjdXJp
dHlfU2VydmVySURfT1ZfQ2xhc3NfMl9DQS5jcnQwDAYDVR0TAQH/BAIwADCCAV4G
A1UdEQSCAVUwggFRghF3ZWJtYWlsLnN0cmF0by5kZYIVZGF2LndlYm1haWwuc3Ry
YXRvLmRlghdzaGFyZS53ZWJtYWlsLnN0cmF0by5kZYISd2VibWFpbC5zdHJhdG8u
Y29tghZkYXYud2VibWFpbC5zdHJhdG8uY29tghhzaGFyZS53ZWJtYWlsLnN0cmF0
by5jb22CFmNvbW11bmljYXRvci5zdHJhdG8uZGWCGmRhdi5jb21tdW5pY2F0b3Iu
c3RyYXRvLmRlghxzaGFyZS5jb21tdW5pY2F0b3Iuc3RyYXRvLmRlghdjb21tdW5p
Y2F0b3Iuc3RyYXRvLmNvbYIbZGF2LmNvbW11bmljYXRvci5zdHJhdG8uY29tgh1z
aGFyZS5jb21tdW5pY2F0b3Iuc3RyYXRvLmNvbYIOY29tNC5zdHJhdG8uZGWCD2Nv
bTQuc3RyYXRvLmNvbTCCAnAGCisGAQQB1nkCBAIEggJgBIICXAJaAHcA7s3QZNXb
Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGc7EIXwAABAMASDBGAiEA+oV4
bYg41vY+m6QBsh31iviITUdnS0mZJQL82YvNK4MCIQCeR8wd3KqvRw0ghuAGlt6G
PFWjDpWVYXFg4fy2H5c/DwB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM
Wjp0AAABhnOxCFEAAAQDAEgwRgIhAPrMsxCjPNfLLWJjXxe2wb34EVdTfAjMn68J
2ZHMLGlHAiEAu3Bu8rKBSxYXZxlSthBC5Iajd9ME/69pZdgshFGw2EcAdQBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYZzsQlVAAAEAwBGMEQCIEVV
ZAmm8tB7a6kkOJLtlzFCh+uBi8mjxCrZKfdyhBpLAiB3XKHyvUJL42dEcdk3tqft
I+lWa7/vzGyxEHsO7cqnUAB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrB
d3K1AAABhnOxCVIAAAQDAEcwRQIgMLXhoMOjFhc5ipZWrYyowUtGbEU217mbF6Yj
ySZDX4sCIQCyXE0/a5ICo7PNaT+awYCzV/lCo6zs8G3FIW8uCnRH1AB3ANq2v2s/
tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABhnOxCJkAAAQDAEgwRgIhAI6j
HyaXAWcuginwyMtEuuwE6PsfaJ8SQMM3+GKPBfKLAiEA2EjF+4APlgdCBQoFD1yu
GqSMb/sLqRX7r0meJ6tzPG8wDQYJKoZIhvcNAQELBQADggGBALEJ5HEGYiFKHWV4
G/M4s0ttni67UGJunRkZUiS532l0/JY16QHVoCfdeUTGfaQ6Hge9OQMk2wTjne/e
6d0/9VAHd1WvZ8Dnzw+crIb7zwaCxeXSYHrpqvisxViAnz1tEW9zDg9Ishyr0tLO
IAuN+zXAEJKt5CbHgM/Ug8M6Df+HlwACmu8k9ELfAgNw9wqXDoUJ97O0KSE3sarB
UjRDUfrpxKoAjXXGSvnqqKtEaes8ae/Oj/W5iXJGYjx1YNRQtljZcDGHhH0l1VA4
BSclAlhduzzy9h+9LxCYrmgw3g1uiNn/OLkjQR5LhXdqBD9x/bwHYKddpzw45/PY
4G+y0pAexNJu9x60CJhJtFhijg/79v60OAAARXCCWqhYPrPqmhFAocHKF1ruxelk
omr2UfWlFs+UKZCKLQqZ+PmoEElVB+pcHapakcEkCqdSNBElZVfkoEoPAV0MHkcg
V7e6EK85Co6KD2L5WGzcI1vlRcuZHjZc67OmJcnbrlfc6xDdSg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0SMyg+3JyLigSvaj6ZO
tUF4y0PHY/FvLqI+OdnI5kgGR/R4Xbz+fCEsVbO6gAB+XEbtcT7G4J5ZOL58FVp9
yVmNs39JvRVzlFAuHURk1tF0LsiEUgMMXNNizQrdAW+P4fl0SyGZ5g62fsG8AS6I
NSVitZ1DAtuE5NOpbY5W4yrtwmYEFhL10b9nqCa0bZWAC/hKkqnIXPRUUbWfe0RE
2fK4hhA29jDMwNCGFOEqtt7AxSQ2b7634SzXfdQRU3W3xN9ASo4bimlSbM1R9UwR
qUwfk0G3GB3U40dFPIfOh/HseMWaJwt6/5XOImloRjaetU7KhGfM7LbcvECPHDoc
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18602654607323726312572332661150151050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Telekom Security GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telekom Security ServerID OV Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 11:17:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19095787294133407222781515273276552710597067743798610281055157167296303454663409001451697659604610152914926523084030590524397518449501535569806613739864285704777544023167054273753596843478864686460306093723933585254224143603483173211627486117561405780509165779798804294855561289391148839712665683415913156949507684994734140034017061324766192501653077752600847001141610084488982115855202887262917038461322804904418622726064576912033425037246026820497205213436196456358659823325126696686161922233292052052373867546177296607041878039762107444287255948282295120516327796024155926211002927779207428433660253394027373272189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c0593b17fa834308c52e09640a072a3105de0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcb5e88f2bfded20528968e8424326c122364f0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://docs.serverid.telesec.de/cps/serverid.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverid.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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