*.navigator.1und1.de

- IONOS SE -

Issued by Telekom Security ServerID OV Class 2 CA

About this certificate

This digital certificate with serial number 2c:83:9a:b1:0b:b9:d8:90:cc:ed:fe:9f:23:9a:9a:c9 was issued on by Deutsche Telekom Security GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

IONOS SE

Organization: IONOS SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

Deutsche Telekom Security GmbH

Organization: Deutsche Telekom Security GmbH
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:83:9a:b1:0b:b9:d8:90:cc:ed:fe:9f:23:9a:9a:c9
Serial Number (int): 59169360221097097296059734928943389385
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 01:8e:68:d4:58:e3:a6:33:f5:49:74:1b:48:df:a5:f7:70:16:83:84
AuthorityKeyId: 1c:05:93:b1:7f:a8:34:30:8c:52:e0:96:40:a0:72:a3:10:5d:e0:ff

Fingerprint (sha1): 50:9a:a8:38:1a:2e:5a:ef:0e:0a:6c:c3:49:15:86:3f:ca:a5:17:2d
Fingerprint (sha256): 01:c0:67:bb:4b:21:52:a9:99:89:51:da:d7:f8:13:57:46:d2:5c:04:86:1f:18:2d:fc:27:95:7b:c3:d6:c7:43

Issuing Certificate URL: http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt

Revocation information

OCSP Server: http://ocsp.serverid.telesec.de/ocspr
CRL Distribution Point: http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl

Check the revocation status for certificate *.navigator.1und1.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.navigator.1und1.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.navigator.1und1.de
navigator.1und1.de

Other certificates including the domain name 1und1.de

(limited to 100 certificates)
col-ext-mamproc.1und1.de
incapsula.com
sma-static.1und1.de
listlocalcheck.1und1.de
kontakt.1und1.de
home.1und1.de
pixel.1und1.de
www.he-roes.de
postmaster-contact.1und1.de
domains-center.1und1.de
upselling.1und1.de
img.ui-portal.de
kst-offensive.1und1.de
*.navigator.1und1.de
edit.1und1.de
clientsmartfax.1und1.de
kundenshop.1und1.de
comsproxy.1und1.de
pocketweb.1und1.de
sd2dav.1und1.de
mike.1und1.de
apitest1.1und1.de
microshop.1und1.de
*.1und1.de
pre-mobile.1und1.de
hilfe-center.1und1.de
telesales-hosting.1und1.de
community.1und1.de
webmailcluster.1und1.de
tnt.1und1.de
maps.suche.1und1.de
upselling.ionos.de
webservice.ccsys.1und1.de
www.he-roes.de
img.ui-portal.de
sd2dav.1und1.de
www.he-roes.de
0700.1und1.de
reporting.smartsurfer.1und1.de
forum.1und1.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
webservice.ccsys.1und1.de
mein.1und1.de
account.1und1.de
www.he-roes.de
*.home.1und1.de
de-mail.1und1.de
premium-feature.1und1.de
sem-admin.1und1.de
activator.smarthome.1und1.de
pixel.1und1.de
privathomepage.1und1.de
hosting.kundenshop.1und1.de
auth-proxy.1und1.de
shoplogin.1und1.de
pre-auth-proxy.1und1.de
wl.portal.1und1.de
wechsler.1und1.de
vertrag.1und1.de
newsroom.1und1.de
hilfe.1und1.de
homepage.1und1.de
mbe.1und1.de
incapsula.com
pre-kunden.1und1.de
www.email.1und1.de
prelive-advertising.home.1und1.de
info.1und1.de
dopas.1und1.de
wechsler.1und1.de
img.ui-portal.de
as.1und1.de
static.1und1.de
pre-dsl.1und1.de
digital-success.ionos.de
1und1.de
pre-upsellingtool.1und1.de
*.1und1.de
osfepre.1und1.de
myapps.1und1.de
phpmyadmin.1und1.de
mobile.1und1.de
webmail.1und1.de
domain-center.1und1.de
dm-jira.1und1.de
listingcheck.1und1.de
www.he-roes.de
chat.hilfe-center.1und1.de
www.he-roes.de
seo.1und1.de
wmde.1und1.de
newsroom.1und1.de
m.1und1.de
winshde16.1und1.de
newsroom.1und1.de
digital-success.1und1.de
images.preisvergleich.1und1.de
incapsula.com
webdav.office.1und1.de

Certificate

The complete raw certificate details for *.navigator.1und1.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5WNLzPJn6iZyU0J+HN
Sux3uuM+jR59DCtl7kdw54kVUxwkn6m32oKw+nA+i8NTazLQDkLMfWwf91OkPdXT
SZdlEAdOXY39QC60EdpsFsRZEWSG5ZeNe1ZpS/LQhVlQOqXJNG9cg8Q211PrDRFb
5tsHGeq58ZQaJAtCGe49XytRJAuA8cpuHgo7SJlc9wrUxN9OkZxOxo8/KCrez+Qt
Sa9IsjjgkjEVByqlLO68jiyuOR1IPMSyNmk51c483ullNgytM19jCod7yMwT0+Ms
0/9DeWzLY8Lg/O9wRxBDj/6kKcI1xowxdv/cNuEh5TipGCYVQF5up+8hYQXH3pGT
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59169360221097097296059734928943389385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Telekom Security GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Telekom Security ServerID OV Class 2 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 09:04:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.navigator.1und1.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19337310159003679000935698302668652482314343537749949152990547709815455239052739758118992620397917441804254564622328841735074240575157340481079677961399896281011542196744309513790176570128232151523306062742938053636900233624046199204718136661984897246322279205933111680530621680621267480911431557660061129074468753827180870070979305944241348519885609292850516789929782152789359746365367304909228733977356487193506785183082929793284033681493554061840834268882553942662279941062351260758745438569166317180211742117617989157656233944740976851423879193155491813440078402637776606093342188153556135388279497157681565766511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1c0593b17fa834308c52e09640a072a3105de0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							018e68d458e3a633f549741b48dfa5f770168384
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://docs.serverid.telesec.de/cps/serverid.htm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverid.telesec.de/rl/Telekom_Security_ServerID_OV_Class_2_CA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverid.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.serverid.telesec.de/crt/Telekom_Security_ServerID_OV_Class_2_CA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navigator.1und1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigator.1und1.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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