cloudpanel-api.1and1.com

- 1&1 Internet Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:d0:cb:ec:4d:84:49:e8:ee:48:ea:db:dc:0c:7c:a0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 Internet Inc.

Organization: 1&1 Internet Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:d0:cb:ec:4d:84:49:e8:ee:48:ea:db:dc:0c:7c:a0
Serial Number (int): 15705641751195486398156762004891401376
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4a:c4:19:31:d6:92:3e:a1:ed:22:96:d9:41:84:2b:8c:0a:f4:b0:ee
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f1:7f:e3:05:ee:e2:9b:39:23:60:61:fc:2d:c6:3c:b8:d9:ab:0f:4f
Fingerprint (sha256): 09:01:2a:90:d3:f6:5c:bc:db:1b:e5:66:c7:30:c9:15:8c:0e:df:10:95:da:d6:03:1f:14:5a:45:a5:da:6c:fc

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate cloudpanel-api.1and1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloudpanel-api.1and1.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloudpanel-api.1and1.com

Other certificates including the domain name 1and1.com

(limited to 100 certificates)
incapsula.com
winshus63.1and1.com
whstatic.1and1.com
kontakt.1und1.de
help.1and1.com
sslext.1and1.com
listlocal.1and1.com
www.1and1.com
postmaster-contact.1und1.de
mywebsitepersonal.1and1.com
mam-hipchat.1and1.com
winshus124.1and1.com
*.nltconfirm.1and1.com
help.1and1.com
mri.1and1.com
backup-panel.1and1.com
analytics.1and1.com
*.1and1.com
mike.1und1.de
winshus107.1and1.com
cloudpanel-feedback.1and1.com
contact.1and1.com
microshop.1and1.com
xadmin.exchange.1and1.us
passwort.ionos.de
mypersonal.1and1.com
domainconnect.1and1.com
smd-static.1and1.com
mybusiness.1and1.com
upselling.ionos.de
ias.1and1.com
pics.newslettertool.1and1.com
premium-feature.1and1.com
timsato.tool.1and1.com
*.1and1.com
dav.mailxchange.1and1.com
1.exchange.1and1.us
websiteanalysis.1and1.com
mbe.1and1.com
testing.rankingcoach.1und1.de
vacation.extranet.1and1.com
winshus131.1and1.com
location-marketing.1und1.de
domainconnect.1and1.com
nlt-qa.1and1.com
admins.domains-web.1and1.com
telesales-diy.1and1.com
winshus100.1and1.com
admins.domains-gmxnet.1and1.com
surveys.1and1.com
login.ionos.de
domrec-services.1and1.com
websitebuilder.1and1.com
winshus126.1and1.com
caas.1and1.com
onlinestorage.1and1.com
cloudpanel-api.1and1.com
sem-admin.1and1.com
mywebsitepersonal.1and1.com
ipc.help.1and1.com
winshus100.1and1.com
mailxchange.1and1.com
mybusiness.1and1.com
cantina.extranet.1and1.com
newsroom.1und1.de
order.1and1.com
m.help.1and1.com
loginapi.1and1.com
api-staging-caas.1and1.com
osfepre-us.1and1.com
analytics.1and1.com
ias-stats-services.1and1.com
1.exchange.1and1.us
timsato.xtool.1and1.com
serviceportal.1and1.com
api.1and1.com
community.1and1.com
digital-success.ionos.de
login.ionos.de
admins.domains-gmxnet.1and1.com
admins.domains-web.1and1.com
mailxchange.1and1.com
ohpcontrollerqa.1and1.com
onlinestorage-help.1and1.com
phpmyadmin.1and1.com
widgets-mw.1and1.com
smtp.1and1.com
widgets-mw.1and1.com
winshpus9.1and1.com
newsroom.1und1.de
winservicesus.1and1.com
newsroom.1und1.de
api.1and1.com
vacation.extranet.1and1.com
smtp.1and1.com
help.1and1.com
incapsula.com
admin.1and1.com
winshus115.1and1.com
contact.1and1.com

Certificate

The complete raw certificate details for cloudpanel-api.1and1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d48A/H91KJTHVT9fBWN
DE1skkGu+VXWaskUi3aR+Cjx0FOyiFQqvMxQXsn2SEr8ctkGuhdU7DKH68ydDiqa
9E5WpN4HywcO9aRikT22FVjtpucNULKpGoHcfnhDVOA4dtUStIdu52/PtI8KDq7y
S62Ekq/eHJ1IiuQOw6Ji+NkYwgjQmVJBS1obzAtdFcljasi88OwVy9sDqjNwsw4i
WZKPAgkZOQo410LP9d9HJXujzVQZ9VDxoi30EFPT/uASztM8HRESa9nCNru7b/6y
TUTcw28WMLBo4Xi+xrxJIaVXr04Jri1JSPIY6VJIPPWyahcIjSGZA8rL9DYvTSiG
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15705641751195486398156762004891401376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloudpanel-api.1and1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26998346842164083764509363327234373007561026321724247697298022800053562727634147568126663997900974794515567988142558068013597938569755486152155365440650316810803551544168854220007748373745404035245748788855822785175517251658054243668095222350412622426664723749143595992112431176971464910156386702633174850479411437772652283795442253165905957073786758681780152714246437231259452984548531349498254523743471095425219814355126530565234678115803462102024230852522826868919598573304112221902298748291788827688311616033843676112775160293223302043919933768696116860113799030270718573218588214618513547755484750670195717605091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ac41931d6923ea1ed2296d941842b8c0af4b0ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudpanel-api.1and1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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