mta-sts.r13t.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:ef:4a:34:98:f1:c2:89:2f:00:ca:c3:6d:a9:cd:f9:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mta-sts.r13t.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:ef:4a:34:98:f1:c2:89:2f:00:ca:c3:6d:a9:cd:f9:c9
Serial Number (int): 342982414277147960337349003784451072588233
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:97:f2:34:f0:d8:02:9f:3b:78:5f:10:79:4d:3f:75:7f:72:09:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:2f:67:8d:37:a2:5d:94:8a:f2:b6:43:fc:8c:19:19:21:49:77:d6
Fingerprint (sha256): 6f:29:ce:28:0e:af:a7:44:ac:db:a4:c3:51:5a:5a:a2:0d:e3:1d:34:59:a6:b7:65:6a:9f:95:0f:0e:4d:d0:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mta-sts.r13t.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mta-sts.r13t.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mta-sts.r13t.de

Other certificates including the domain name r13t.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mta-sts.r13t.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342982414277147960337349003784451072588233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 20:55:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 20:55:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mta-sts.r13t.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882750097473772783807843918190740384780127456294825643536009481462783851275836129979365791954966081999650208716869033883190706025292562104005385474618866459896218321292939204261181673359171727566274762463008267908504037990347564695312366786478544029792127420081336602952819254604466502635712923798398209827671561333295226798308594524775692881812601152220031194202479138978464831670189872979358268476359701503022450138131883953603489477527058781816412311034176443688927257777565546278712746031695777437818732247754814959969086004782011627173962607627612340138060295595984005405281349289309622460254843633864244158151642207780764961318879999873956460686554450254757859298153733156008926619588839879442161147183589591987963396415847501525198577278784353256419699238334513378185975256428118868558021198521167549821963726868411200087819274578086804938765618054764045884572144707926028579377231450580875020748192108415606268965302940391931640628754147761071916740712599657051594966685671439908061293082126281394282036441634607945802701349068387671382099523367345152898944046841408328781766539140981360157866516224591426192866779047027497833705573979428737314722740666905451675145618359092496005478618981240012259407901000066597684508675821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9797f234f0d8029f3b785f10794d3f757f72096a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.r13t.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a7564f28e0000040300473045022100ae6da3dd2a8f093d42c11231004322ad8163e645616169f81ce405d5961f113802204c3f2bf9daa134055aafc2f7c4aab8b74aee8b62251a5f7660af9b6260967d0d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a7564f2b1000004030046304402206630c4188e489b81fc87582cbed9a9589e09c5e4b0cf7a129ccd754d00d7e07502202016ab2ce38420fd88540f5b3640d52f44b0a4a34a9962fb7c5edb1445ef6dc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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