pics.newslettertool.1and1.eu

- 1&1 Internet SE -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 10:4a:c3:8a:61:6f:35:a4:55:7a:c1:5e:4b:10:fd:f4 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

1&1 Internet SE

Organization: 1&1 Internet SE
State / Province: Rhineland-Palatinate
Locality: Montabaur
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:4a:c3:8a:61:6f:35:a4:55:7a:c1:5e:4b:10:fd:f4
Serial Number (int): 21655843933603860290680191051285724660
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 1d:b9:27:de:b0:f8:ba:da:67:a5:ef:40:a9:2e:7b:cd:c0:77:69:3e
Fingerprint (sha256): 0d:67:bf:99:c7:98:d1:ad:12:0b:56:e2:65:ac:44:35:f7:4b:6c:d8:27:64:71:04:f1:f1:d1:8f:58:b0:9a:00

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate pics.newslettertool.1and1.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pics.newslettertool.1and1.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pics.newslettertool.1and1.eu

Other certificates including the domain name 1and1.eu

(limited to 100 certificates)
1.exchange.1and1.eu
winserviceseu.1and1.eu
1.exchange.1and1.eu
pics.newslettertool.1and1.eu
pics.newslettertool.1and1.eu
xadmin.1.exchange.1and1.eu
1.exchange.1and1.eu
pics.newslettertool.1and1.eu
xadmin.exchange.ionos.eu
xadmin.exchange.1and1.eu
winserviceseu.1and1.eu
1.exchange.1and1.eu
xadmin.exchange.1and1.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
xadmin.1.exchange.1and1.eu
xadmin.exchange.ionos.eu
pics.newslettertool.1and1.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
exchange.1and1.eu
1.exchange.1and1.eu
winserviceseu.1and1.eu
xadmin.exchange.1and1.eu
1.exchange.1and1.eu
winserviceseu.1and1.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
winserviceseu.1and1.eu
xadmin.1.exchange.1and1.eu
pics.newslettertool.1and1.eu
xadmin.1.exchange.1and1.eu
winserviceseu.1and1.eu
xadmin.exchange.ionos.eu
1.exchange.1and1.eu
winserviceseu.1and1.eu
smtp.1.exchange.1and1.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
xadmin.1.exchange.1and1.eu
mail.1.exchange.1and1.eu
1.exchange.1and1.eu
1.exchange.1and1.eu
pics.newslettertool.1and1.eu
xadmin.exchange.ionos.eu
xadmin.1.exchange.1and1.eu
Exchange2019.ionos.eu
xadmin.exchange.ionos.eu
xadmin.exchange.ionos.eu
xadmin.exchange.1and1.eu
1.exchange.1and1.eu
xadmin.exchange.1and1.eu
1.exchange.1and1.eu

Certificate

The complete raw certificate details for pics.newslettertool.1and1.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8MLrT3YPSyE+s20jA5I
+4xfWaEw5aU6rPrnYG0m4t6Pb82uMtIGLX0h48lMgWw1q1znqSngIgyOZ++l3/sN
trp2ZEQCj5lrvhpuwBIgIx6vYUYnRnQUIyFuzV7pT3gRZi62ryTb/1EzzV4GAI4J
yvAqUaSAsZ2lVKl9RbypnXdtSzLWI1q9Ym7IN2DNIwdxgpAPWgV/B0g/hbdeul+1
KUc+i5bhmasWYzmB5RR89oGTyrVeNv7SKL9VuuY7bfP8xBXO9IOwvDjM3VZ485j6
bS5IunuPi3OMs4SmBfXsPQNvOPQZPm0P7tRW/qBWYaEbTZEtshsE4FtFIXwLPzv8
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21655843933603860290680191051285724660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rhineland-Palatinate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pics.newslettertool.1and1.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18653211406088921470212768186311564449371289074912291621341006461790733716812022139422724590243842213228238958896106308990660016090978132066186369109020867688060709991842313979262398091967206986466870514556714115755565439763076835065321862708759882749731249864462937892980427025280801528336681345494802226073537274375732622130887704960034976999043298658396596568208870969595394212120252903835678248878824097581218626381558395030397341673986223642649382593380148167826797831676090152974836484851516949580165431449621302695543888346737401288601895183463277807140101954147391702827715990422941292819799337955096555945191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pics.newslettertool.1and1.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c5ea53a6e0000040300483046022100abf4b2f0ee4e93a176d348d8ff09cbb4122e6e0fe4c13c7cf8cd2cb420f2547d022100a297777f3df877395b44c67cbfa2516157495391be63690d3c721570339cb2ff007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c5ea53a860000040300463044022022550d6131dffce5b2acbff7a17810d8ab0c2ad50848ed60c50653f57ae2366602204f56c309ab80f2df7592236d511c4e63e278aa2abe12235de4b01ec63f8eac35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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