digital-success.1and1.it

- 1&1 Internet SE -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 78:a7:ef:20:d0:30:63:bb:45:cc:8c:a8:94:d4:37:b4 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

1&1 Internet SE

Organization: 1&1 Internet SE
State / Province: Rhineland-Palatinate
Locality: Montabaur
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:a7:ef:20:d0:30:63:bb:45:cc:8c:a8:94:d4:37:b4
Serial Number (int): 160379323165193075619145338420332869556
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): ed:b8:d1:26:9f:cd:0d:a9:2d:be:b1:9e:8e:df:69:44:71:ed:78:cb
Fingerprint (sha256): 25:8b:fa:c9:a4:be:fa:95:be:28:4d:ea:d3:5f:02:22:67:c2:f3:7b:20:01:69:18:7a:b7:73:23:b0:4c:76:23

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate digital-success.1and1.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital-success.1and1.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital-success.1and1.it

Other certificates including the domain name 1and1.it

(limited to 100 certificates)
kontakt.1und1.de
postmaster-contact.1und1.de
sitoweb.1and1.it
password.1and1.it
mike.1und1.de
shop.1and1.it
account.1and1.it
passwort.ionos.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
login.ionos.de
account.1and1.it
1.exchange.1and1.eu
incapsula.com
incapsula.com
newsroom.1und1.de
domain-center.1and1.it
incapsula.com
webmail.1and1.it
digital-success.ionos.de
login.ionos.de
domain-center.1und1.de
www.email.1and1.it
newsroom.1and1.it
incapsula.com
newsroom.1und1.de
newsroom.1und1.de
ias.1and1.it
incapsula.com
incapsula.com
redirect.1and1.it
mywebsite.1and1.it
testing.rankingcoach.1und1.de
www.1and1.com
incapsula.com
incapsula.com
domain-center.1and1.it
ias.1und1.de
incapsula.com
smtp.1and1.it
xadmin.1.exchange.1and1.eu
digital-success.ionos.de
postmaster-contact.1und1.de
vertrag.1und1.de
vertrag.1und1.de
domains-center.1and1.it
postmaster-contact.1und1.de
sitoweb.1and1.it
newsroom.1and1.it
mywebsite.1and1.it
incapsula.com
incapsula.com
www.email.1and1.it
kontakt.1und1.de
cloudpanel.1und1.de
incapsula.com
mywebsite.1and1.it
webmail.1and1.it
aiuto.1and1.it
ias.1and1.it
kontakt.1und1.de
navigation.1und1.de
kontakt.1und1.de
kontakt.1und1.de
navigation.1and1.it
ntld-status.1and1.it
redirect.1and1.it
cloudpanel.1und1.de
webanalytics.1und1.de
incapsula.com
navigation.1and1.it
pop.1and1.it
login.1and1.it
mywebsite.1and1.it
contatti.1and1.it
webanalytics-reports.1und1.de
m.aiuto.1and1.it
digital-success.1and1.it
xadmin.exchange.ionos.eu
contratto.1and1.it
www.1and1.it
imap.1and1.it
www.1and1.it
vertrag.1und1.de
incapsula.com
m.aiuto.1and1.it
dav.mailxchange.1and1.it
incapsula.com
ntld-status.1and1.it
social.1and1.it
www.1and1.it
xadmin.exchange.1and1.eu
contatti.1and1.it
shop.1and1.it
incapsula.com
vertrag.1und1.de
account.1and1.it
www.social.1and1.it
analisi.1and1.it
newsroom.1and1.it

Certificate

The complete raw certificate details for digital-success.1and1.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 160379323165193075619145338420332869556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rhineland-Palatinate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digital-success.1and1.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839018332839727656333959389634802496242814950815803471975581444473337316069241134719093954723031654547891357186657302427001734803588957611885867590907652335223381641890337358988764482617145920083042039256605094925787913991746336643899181499533507612860396434706245134241082978389302973987785078712154310408515195917837539718425184536305252130075353037114022547407776771734035225298370880075568815843638462590190591858212104328258492983303971424047807535573963031785583330314174354458873195894667435180305849724685357810785625220947521369185991867485960518455430617782344387529460412789782734196609834241794021917739121698951917912490631011056348178043755983702788994989971844935699353281788560966429224313093267517269793764431810655832671249731699014414614039732234195148381069933414613316862804130176272144933547315620376445702184753212547662469482577123012067632100383108467915801867750337361658990491193199276107330897999684958385189098730669691161431342418450644923818160506879375419789376496844189034318719275111311361036140125673287793142467297452706905089043518723620578754959340975250444341171075115191264438823026568256267896426270541913020919215788447845125683940643262925258887129911553379295418831029340219522737195703203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-success.1and1.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015cd509c64f0000040300483046022100d89b3f3c14fbff310b3f5046d34b9b5f55513a23a02cce6b3e09a0cd6223efea022100ba795fbd472864717cb9cf6a104be50ce9b7e9d84c2997c6b89ff4ab8e1b1ca6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015cd509c6680000040300473045022100b060f743bbb36ebb310420a8a70bfba01f2aafb130241ceba00d9856ce1b8bbd0220226dc83eb8ead88ff55e900b5335bef62828b6e5e17fe4ea89558e2acdbd798e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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