webmail.strato.de

- Strato AG -

Issued by TeleSec ServerPass Class 2 CA

About this certificate

This digital certificate with serial number 3f:79:41:57:39:f5:2f:de:31:ea:5b:d2:f7:df:ad:3b was issued on by T-Systems International GmbH.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strato AG

Organization: Strato AG
Organization unit: Rechenzentrum
State / Province: Berlin
Locality: Berlin
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: T-Systems Trust Center
Address: Untere Industriestr. 20
Postal code: 57250
State / Province: Nordrhein Westfalen
Locality: Netphen
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:79:41:57:39:f5:2f:de:31:ea:5b:d2:f7:df:ad:3b
Serial Number (int): 84370956921743848671187882579184299323
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 63:d1:92:01:c1:ce:b5:28:b3:1a:a5:94:a1:2d:68:1c:8b:6b:a1:f5
AuthorityKeyId: 94:c8:74:46:f5:3a:b4:46:48:26:f8:2b:ca:34:1e:56:26:04:12:00

Fingerprint (sha1): 06:e8:15:d7:18:f8:d8:aa:65:4a:a7:d6:04:29:50:52:bc:28:e6:0e
Fingerprint (sha256): 6c:7c:f2:ce:b6:34:df:6c:55:ef:47:c3:bb:b6:bb:85:a1:f0:cb:86:0d:d6:f5:14:5d:fc:05:cf:a5:bf:25:b7

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl

Check the revocation status for certificate webmail.strato.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.strato.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.strato.de
dav.webmail.strato.de
share.webmail.strato.de
webmail.strato.com
dav.webmail.strato.com
share.webmail.strato.com
communicator.strato.de
dav.communicator.strato.de
share.communicator.strato.de
communicator.strato.com
dav.communicator.strato.com
share.communicator.strato.com
com4.strato.de
com4.strato.com

Other certificates including the domain name strato.de

(limited to 100 certificates)
webmail.strato.de
ox-test.strato.de
news.strato.de
www.he-roes.de
shop.strato.de
autodiscover.strato.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
hermes.strato.de
it-sicherheit.news
www.he-roes.de
smtp.strato.de
www.he-roes.de
autodiscover.strato.de
pop3.strato.de
vcd-test-console.sbs.strato.de
kontakt.strato.de
*.strato.de
imap.test.strato.de
*.strato.de
*.strato.de
news.strato.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
kontakt.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
systems.he-roes.de
status.1net.berlin.strato.de
it-sicherheit.news
ox-test.strato.de
smtp.strato.de
imap.test.strato.de
*.in.strato.de
hed.ionos.de
vcd.sbs.strato.de
umfrage.strato.de
hermes.strato.de
*.strato.de
status.1net.berlin.strato.de
www.he-roes.de
www.he-roes.de
imap.test.strato.de
www.he-roes.de
systems.he-roes.de
www.he-roes.de
pop3.strato.de
cooperation.in.strato.de
www.he-roes.de
www.he-roes.de
owa-35.strato.de
imap.test.strato.de
*.shop.strato.de
shop.strato.de
www.he-roes.de
kontakt.strato.de
news.strato.de
smtp.strato.de
www.he-roes.de
umfrage.strato.de
www.he-roes.de
www.he-roes.de
smtp.strato.de
smtp.test.rzone.de
kontakt.strato.de
it-sicherheit.news
*.in.strato.de
imap.strato.de
umfrage.strato.de
imap.strato.de
www.he-roes.de
it-sicherheit.news
www.he-roes.de
www.he-roes.de
status.1net.berlin.strato.de
ox-test.strato.de
www.he-roes.de
ox-test.strato.de
umfrage.strato.de
scp.strato.de
umfrage.strato.de
*.strato.de
smtp.strato.de
pop3.strato.de
webmail.strato.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
www.he-roes.de
*.strato.de
smtp.strato.de
*.strato.de
webmail.strato.de
imap.strato.de
*.in.strato.de
imap.strato.de

Certificate

The complete raw certificate details for webmail.strato.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G7+J00ZrWJyPTmi7t3Q
UNOhlBll0AjY+ypIulwIQrykKJwt/0wjGpwu1DvjJBi0Y34/Bap4n336hFwf9426
++/Z35fZB4+ME6Q0gaWhLN1qMK2rRZI9t3lrWSfPv6hWYUr0DC5LBXtGIEwO1/3w
aGSw/rbDXAgPtPhYJuc17BRK7hlunsd/4DH2vscQ2xlclRylgGg6yuB9/9LTDgJk
24tbcsOFMzdrwUque3sXWle0j6CPNraJvGtQfrPxEzFKzwgsM7jqeIVMXB78EhnN
hg8XBGp4LB0LnoIvRUUveQNUzWli1aT3mJx+dSOVda+wdoV5veNbEkAmXpkGZTM2
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84370956921743848671187882579184299323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'T-Systems Trust Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '57250'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netphen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Untere Industriestr. 20'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeleSec ServerPass Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 09:02:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strato AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rechenzentrum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.strato.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27322206455942532193133964248813013183959190628414676536391352513910869553919857640837406628848627055741975946521611196231252813634851663164469456676039374588164085341580118811364044795059367722814868211941570274184989917940746832306009692811152067467776450981322474144999871412499006599936838122089643201754460325089227707136581212728850537393997613902385832556628140668670928354224763608125107378102304133756459808549598479087307961660428098741863610321541264710435595350852829859605193340729161115695753887000939345708284848980531617264466463847994520163758222993798015816563208988519986705069396336528403381565101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 94c87446f53ab4464826f82bca341e5626041200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63d19201c1ceb528b31aa594a12d681c8b6ba1f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/ServerPass_Class_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_Class_2_CA.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.webmail.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.communicator.strato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com4.strato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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