mx.activemail.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:44:5c:c4:37:c0:b1:10:d3:2b:d6:40:3f:37:8b:88:8b:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mx.activemail.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:5c:c4:37:c0:b1:10:d3:2b:d6:40:3f:37:8b:88:8b:29
Serial Number (int): 371711652474260421778887507878302620093225
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:9b:de:a1:5f:40:f1:38:99:75:4e:63:6d:48:81:a4:6f:3f:2d:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:b6:cf:3f:5e:b9:d5:7e:1c:a8:07:21:39:5d:54:5e:3e:86:c9:49
Fingerprint (sha256): 9d:42:ed:d8:80:95:3a:0f:de:69:04:b0:32:d3:a0:e8:86:d9:e0:c8:c0:70:ed:e8:dd:2d:e3:48:ab:fd:aa:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mx.activemail.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx.activemail.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mx.activemail.de

Other certificates including the domain name activemail.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mx.activemail.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371711652474260421778887507878302620093225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 06:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-04 06:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx.activemail.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856213727775758424539234806141135489738481799712426125359508786103078731157435223197896869983899167386551552297922195109580007765618188962122397276929295365183862641322174734683230920649886676476270263454772075067070981423705981465191886392897466782548958545441276765770993657302950555846310425560723772140812509558273979289706430622731784776362921243893081368989665783503239878827960582643918892254211287655773381907895438576067990564155051673482943556992093258596891748544288107109279928120356369306170565589626254295531557806390417475533511281730095804601191032397197754191922396559945773650475001684215836537803339854663717812806331298708202105878560196131612569080108980362255357874453376293324476869150376540533209585427529235669759808154945769738708414598028047527267267048780206738363081456264175721834056557667168161930396901402426498822544918816201981267786070133861606879732018755291658049597688303269258392287324019144222064418829827508549659228230929565374398539060688824801227316199330036706171479625887177065483951260731400801798687914921572576510608380797936423355213237906967446124141561704461720389751367128682893718017680579354138037010944190498957219559447159829748214037359047439793465890717698576345297409046557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							529bdea15f40f13899754e636d4881a46f3f2de2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.activemail.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007499db05b334e02e40b55b1a188432d96782c350f634121eeb840cfe2fc7c384f9c7556b53b8cd49b96b06ac27059a345477fd72526c965a968ce1314a43d00178ebf7ddf76a625c5d09f50146cc74c9d2a6aae3da3b9f04b111508271a3f6a131ff4c81c1b6a0790de0a814f354c49f2eeb6f5cdf37a1f42d85f9567129be19c22c01d41255c85fba663c47ec8c205787d6791d86fb910b20f1cf30dbbf78059703cbceb263de2314cfa2f8363312813b1a59179729f3c6957952629c118aac4da6e5e6a29c385b5b928754749b535d62a4dd906575ece0e38f2c1db9238cbf5582e2ddf34db4dc7af1640dc23a3e9398e15a5c5173b91871b23ad400435130