tnt.1und1.de

- 1&1 Telecommunication SE -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0c:1b:3a:e3:b3:c9:a1:9e:3c:34:c8:ba:47:fe:82:aa was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 Telecommunication SE

Organization: 1&1 Telecommunication SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:1b:3a:e3:b3:c9:a1:9e:3c:34:c8:ba:47:fe:82:aa
Serial Number (int): 16092122384790907423396157267606667946
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:0f:9b:66:f2:8a:08:58:3c:71:1b:7d:3a:05:8e:30:e1:36:06:70
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): c7:a0:11:33:b1:52:0e:cf:62:9a:a1:be:4b:34:cd:4b:9d:3d:a1:ea
Fingerprint (sha256): 04:46:5d:4b:85:be:b9:39:cb:79:6b:f5:88:ea:b2:06:3a:28:08:08:93:19:d2:00:5c:60:8a:c1:a2:f4:01:aa

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate tnt.1und1.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tnt.1und1.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tnt.1und1.de

Other certificates including the domain name 1und1.de

(limited to 100 certificates)
col-ext-mamproc.1und1.de
incapsula.com
sma-static.1und1.de
listlocalcheck.1und1.de
kontakt.1und1.de
home.1und1.de
pixel.1und1.de
www.he-roes.de
postmaster-contact.1und1.de
domains-center.1und1.de
upselling.1und1.de
img.ui-portal.de
kst-offensive.1und1.de
*.navigator.1und1.de
edit.1und1.de
clientsmartfax.1und1.de
kundenshop.1und1.de
comsproxy.1und1.de
pocketweb.1und1.de
sd2dav.1und1.de
mike.1und1.de
apitest1.1und1.de
microshop.1und1.de
*.1und1.de
pre-mobile.1und1.de
hilfe-center.1und1.de
telesales-hosting.1und1.de
community.1und1.de
webmailcluster.1und1.de
tnt.1und1.de
maps.suche.1und1.de
upselling.ionos.de
webservice.ccsys.1und1.de
www.he-roes.de
img.ui-portal.de
sd2dav.1und1.de
www.he-roes.de
0700.1und1.de
reporting.smartsurfer.1und1.de
forum.1und1.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
webservice.ccsys.1und1.de
mein.1und1.de
account.1und1.de
www.he-roes.de
*.home.1und1.de
de-mail.1und1.de
premium-feature.1und1.de
sem-admin.1und1.de
activator.smarthome.1und1.de
pixel.1und1.de
privathomepage.1und1.de
hosting.kundenshop.1und1.de
auth-proxy.1und1.de
shoplogin.1und1.de
pre-auth-proxy.1und1.de
wl.portal.1und1.de
wechsler.1und1.de
vertrag.1und1.de
newsroom.1und1.de
hilfe.1und1.de
homepage.1und1.de
mbe.1und1.de
incapsula.com
pre-kunden.1und1.de
www.email.1und1.de
prelive-advertising.home.1und1.de
info.1und1.de
dopas.1und1.de
wechsler.1und1.de
img.ui-portal.de
as.1und1.de
static.1und1.de
pre-dsl.1und1.de
digital-success.ionos.de
1und1.de
pre-upsellingtool.1und1.de
*.1und1.de
osfepre.1und1.de
myapps.1und1.de
phpmyadmin.1und1.de
mobile.1und1.de
webmail.1und1.de
domain-center.1und1.de
dm-jira.1und1.de
listingcheck.1und1.de
www.he-roes.de
chat.hilfe-center.1und1.de
www.he-roes.de
seo.1und1.de
wmde.1und1.de
newsroom.1und1.de
m.1und1.de
winshde16.1und1.de
newsroom.1und1.de
digital-success.1und1.de
images.preisvergleich.1und1.de
incapsula.com
webdav.office.1und1.de

Certificate

The complete raw certificate details for tnt.1und1.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16092122384790907423396157267606667946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Telecommunication SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tnt.1und1.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737485168853292484902206897234061756054559104890324864666561504986782940438703325453715760842188289456284216649145553870054669045340366642145180867728097752143877583450019950848329176693392487402753002825686614411446318103387764244920330892682319797752961174011089485711343725095472443663184201584225969807245666775984106955456150880258715221383700318087328791190498734876752769293510119063212360520128594695494195752824247527567425142649596641437930096606705272481180373687683093599147163358429208578015113563853659061612180895388373862240491997806817533407826529375617069008002514172161228646220975445476759433695023827725682128395549305828542794598152077888343100604525425457061385051785581332099141905991339842178415709456973517639912715572894815854380133664170114159661198130078149561663883682015204338538752261307206323039224066254095483389723795127664457232242294460097398626274777501633163695847871769199081046264219013118036440643331563201780648411336133160805961978117629487031061981997787177035673337143372988167266078800753279867695281092161253163567127460279470261063250021564715949895207285354845154130093262465914167880875928645146006807147240327690916305770531042493685742354773164242095272004725828473533902553670409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							340f9b66f28a08583c711b7d3a058e30e1360670
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnt.1und1.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae27c57911692cc4c87f2b122a9ebd79a4d8f651cb0ae5aa7bb4dffbc3283f07a5d1206f1c2b835e63efd21c0a45fde5d969a46d8415535027b7b60b6f0636e6891419a90e4f3fe7c3efd9127b3dfb914eb641ebf70d4ed8b29d09bb36bca7d02cd0b07d91bec13cfe92aba6508c9d56064762789be599e3bbd9bf87bcfa0ce86b7e210f80ee22e33abe8e2a8e8a0758ce23293a04657e4061b90ec66f868121a4ccc13d4058377284fba65e68816d6154fbc0ee2180447e4ef72c1da42ad45ca93065372f3581c52ef88d59a80ae2de95bc51e35d5659a6cd0dbcc18b3ac2e9e96955e7447c061bff18eaa42dac76a13c2b8d3669a23f3f63c6f2043bb24130