navigation.1and1.it

- 1&1 Internet SE -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 0e:34:f4:85:8e:74:a9:ad:53:43:5f:cd:0d:f3:5e:7b was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

1&1 Internet SE

Organization: 1&1 Internet SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:34:f4:85:8e:74:a9:ad:53:43:5f:cd:0d:f3:5e:7b
Serial Number (int): 18884150867009446729005598651576442491
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): fa:c0:78:98:63:88:96:90:78:da:f0:80:87:cf:2d:a9:65:a7:b2:2a
Fingerprint (sha256): 20:10:da:dd:e5:d5:cc:ab:e5:19:a6:81:73:a7:c2:95:2c:95:66:14:b8:92:28:1f:f7:71:15:7d:e7:6b:b1:e8

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate navigation.1and1.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for navigation.1and1.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

navigation.1and1.it

Other certificates including the domain name 1and1.it

(limited to 100 certificates)
kontakt.1und1.de
postmaster-contact.1und1.de
sitoweb.1and1.it
password.1and1.it
mike.1und1.de
shop.1and1.it
account.1and1.it
passwort.ionos.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
login.ionos.de
account.1and1.it
1.exchange.1and1.eu
incapsula.com
incapsula.com
newsroom.1und1.de
domain-center.1and1.it
incapsula.com
webmail.1and1.it
digital-success.ionos.de
login.ionos.de
domain-center.1und1.de
www.email.1and1.it
newsroom.1and1.it
incapsula.com
newsroom.1und1.de
newsroom.1und1.de
ias.1and1.it
incapsula.com
incapsula.com
redirect.1and1.it
mywebsite.1and1.it
testing.rankingcoach.1und1.de
www.1and1.com
incapsula.com
incapsula.com
domain-center.1and1.it
ias.1und1.de
incapsula.com
smtp.1and1.it
xadmin.1.exchange.1and1.eu
digital-success.ionos.de
postmaster-contact.1und1.de
vertrag.1und1.de
vertrag.1und1.de
domains-center.1and1.it
postmaster-contact.1und1.de
sitoweb.1and1.it
newsroom.1and1.it
mywebsite.1and1.it
incapsula.com
incapsula.com
www.email.1and1.it
kontakt.1und1.de
cloudpanel.1und1.de
incapsula.com
mywebsite.1and1.it
webmail.1and1.it
aiuto.1and1.it
ias.1and1.it
kontakt.1und1.de
navigation.1und1.de
kontakt.1und1.de
kontakt.1und1.de
navigation.1and1.it
ntld-status.1and1.it
redirect.1and1.it
cloudpanel.1und1.de
webanalytics.1und1.de
incapsula.com
navigation.1and1.it
pop.1and1.it
login.1and1.it
mywebsite.1and1.it
contatti.1and1.it
webanalytics-reports.1und1.de
m.aiuto.1and1.it
digital-success.1and1.it
xadmin.exchange.ionos.eu
contratto.1and1.it
www.1and1.it
imap.1and1.it
www.1and1.it
vertrag.1und1.de
incapsula.com
m.aiuto.1and1.it
dav.mailxchange.1and1.it
incapsula.com
ntld-status.1and1.it
social.1and1.it
www.1and1.it
xadmin.exchange.1and1.eu
contatti.1and1.it
shop.1and1.it
incapsula.com
vertrag.1und1.de
account.1and1.it
www.social.1and1.it
analisi.1and1.it
newsroom.1and1.it

Certificate

The complete raw certificate details for navigation.1and1.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18884150867009446729005598651576442491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'navigation.1and1.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850039734840999564476624718516889958332987709162014335795073286321848442804525953990029097449377404465844504344077741571366298728883810916030288381927763024209094115600138587438155464960440063797924512230288482517459741048729249219884181810485855872698364136646084063337501791759896922415817369994029125217802984717410631023988834098357260695631782771947926648358984522038457075943730695363293792533393102287175382990688131453653261298893580662314724025109111162742446264755467433600035967598420014482655250171130136157863239456733926069991239206959469038028488393885237214896986636650585404969847457420934879925507197179782326998249867335252526807848196491567193231339586346985871997211402492169385075811797939985290197554201306407865448872898554986857699533944791561858074556912732012756316060854239911043932271249177335721468093693770863247785894735057084635916627729276145280037120801903435496583273379300070257519237952546581146638748875210348140631982349181124362156899522738234016293516230792564097475892251788746750022225656083901230149518923762685881455691346174163316334453741598396700565943763494048029875260259600116018796627128740173292488197168811773884194607240549764790868712703157417199210943149104404143854730724851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigation.1and1.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001566ea32bbb0000040300473045022100cde2c38c58eb993ccf2dafa92f253ae65153079c218202e93c748e4bf2f758c00220392014d64ef26c2af5f1af3af10ad7001392b33765a86a52480fe893cf946583007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001566ea32bd70000040300473045022100cf5544e836de926ee4492c0c0e90c70f771452d8df117c074c10003839b0dade02204a3010dd0e2946f0ca4a4957e325db670790c89eae78f7c2db3057f8d2eb12c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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