widgets-mw.1and1.com

- 1&1 IONOS Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:b7:65:c8:ee:0a:c5:28:6d:ff:8c:ba:60:a7:67:10 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 IONOS Inc.

Organization: 1&1 IONOS Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:b7:65:c8:ee:0a:c5:28:6d:ff:8c:ba:60:a7:67:10
Serial Number (int): 11586078734064124758501244209702856464
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:59:92:17:51:ac:da:d8:09:12:51:41:d1:8e:27:39:8b:6e:10:af
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 5e:39:35:d0:36:60:71:73:07:18:91:f7:a3:20:ec:cf:15:7a:6d:78
Fingerprint (sha256): 0d:a0:2c:c5:62:4f:ae:9c:24:bf:c1:f6:79:0c:7b:ee:e1:e9:4b:e6:6e:5d:0f:aa:79:a4:ef:a4:69:74:03:3f

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate widgets-mw.1and1.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for widgets-mw.1and1.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

widgets-mw.1and1.com
widgets-sso.1and1.com
widgets-cdn.1and1.com

Other certificates including the domain name 1and1.com

(limited to 100 certificates)
incapsula.com
winshus63.1and1.com
whstatic.1and1.com
kontakt.1und1.de
help.1and1.com
sslext.1and1.com
listlocal.1and1.com
www.1and1.com
postmaster-contact.1und1.de
mywebsitepersonal.1and1.com
mam-hipchat.1and1.com
winshus124.1and1.com
*.nltconfirm.1and1.com
help.1and1.com
mri.1and1.com
backup-panel.1and1.com
analytics.1and1.com
*.1and1.com
mike.1und1.de
winshus107.1and1.com
cloudpanel-feedback.1and1.com
contact.1and1.com
microshop.1and1.com
xadmin.exchange.1and1.us
passwort.ionos.de
mypersonal.1and1.com
domainconnect.1and1.com
smd-static.1and1.com
mybusiness.1and1.com
upselling.ionos.de
ias.1and1.com
pics.newslettertool.1and1.com
premium-feature.1and1.com
timsato.tool.1and1.com
*.1and1.com
dav.mailxchange.1and1.com
1.exchange.1and1.us
websiteanalysis.1and1.com
mbe.1and1.com
testing.rankingcoach.1und1.de
vacation.extranet.1and1.com
winshus131.1and1.com
location-marketing.1und1.de
domainconnect.1and1.com
nlt-qa.1and1.com
admins.domains-web.1and1.com
telesales-diy.1and1.com
winshus100.1and1.com
admins.domains-gmxnet.1and1.com
surveys.1and1.com
login.ionos.de
domrec-services.1and1.com
websitebuilder.1and1.com
winshus126.1and1.com
caas.1and1.com
onlinestorage.1and1.com
cloudpanel-api.1and1.com
sem-admin.1and1.com
mywebsitepersonal.1and1.com
ipc.help.1and1.com
winshus100.1and1.com
mailxchange.1and1.com
mybusiness.1and1.com
cantina.extranet.1and1.com
newsroom.1und1.de
order.1and1.com
m.help.1and1.com
loginapi.1and1.com
api-staging-caas.1and1.com
osfepre-us.1and1.com
analytics.1and1.com
ias-stats-services.1and1.com
1.exchange.1and1.us
timsato.xtool.1and1.com
serviceportal.1and1.com
api.1and1.com
community.1and1.com
digital-success.ionos.de
login.ionos.de
admins.domains-gmxnet.1and1.com
admins.domains-web.1and1.com
mailxchange.1and1.com
ohpcontrollerqa.1and1.com
onlinestorage-help.1and1.com
phpmyadmin.1and1.com
widgets-mw.1and1.com
smtp.1and1.com
widgets-mw.1and1.com
winshpus9.1and1.com
newsroom.1und1.de
winservicesus.1and1.com
newsroom.1und1.de
api.1and1.com
vacation.extranet.1and1.com
smtp.1and1.com
help.1and1.com
incapsula.com
admin.1and1.com
winshus115.1and1.com
contact.1and1.com

Certificate

The complete raw certificate details for widgets-mw.1and1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ofV6+o+p0T0/GzB6rFH
8rrNwAeNcWaBmCcFLmh6dRi2uWp1KGHgDKK641wCSbLqX9Wpa1Dum/wfqL/FUeph
gy1UpVEENCuT0+GeqvNHoI4U5aBwmzPMBFpkeOXIYRMz/xcwSxVAxzERETtOqzqu
Fh1yTfcDIOlADGfkV0vELUxLTWDLGWB5dOzoTW4WFHaOFEkNiHDvSFJlMXIq7yiH
dm0gI0dahPmAcyWfIRyHhNFf5X56kuW2UzQZopjkmDUT2ZPWvnivK5uOwmEzjkHP
qytZ1rtbRCSJ4UpAQ3rOi3wtH7Ad5CeW492TXeVwz+gHO1tfqxvBkNXbeOMWmRcT
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11586078734064124758501244209702856464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 IONOS Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'widgets-mw.1and1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26577027089024291494928505674926167505632430868244857074755884775245408693486607172193604828298373695983609993328704590908773080583011917995846580268443332762394736234703318339792522445799060527780621304114855247872891937685832278601744891253141170753780792301647542186890007698952292106151669559507958357284937811735455881122107504021364622796596869695022512933811752501367349288353280886795157865222432978161409030305803071752461828233066478018334568818013224427188230435687396373097671357455092995652277181119068318953892424212689389105859471433790769443023587497110234158636975149356035090652990033968316303217463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9659921751acdad809125141d18e27398b6e10af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-mw.1and1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-sso.1and1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-cdn.1and1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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