www.1and1.it

- 1&1 IONOS SE -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 04:0f:26:51:39:02:72:e1:49:54:bf:2f:cb:49:01:5e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 IONOS SE

Organization: 1&1 IONOS SE
Organization unit: IT
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:26:51:39:02:72:e1:49:54:bf:2f:cb:49:01:5e
Serial Number (int): 5395573602707394241967061133341294942
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 91:45:21:a7:d2:e8:e7:e9:f8:f6:4a:27:14:f1:47:03:72:50:68:50
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): e7:97:97:cd:26:8d:81:50:0b:bc:12:24:c5:56:ba:8a:56:f7:aa:b2
Fingerprint (sha256): 28:4b:0b:f7:2c:ff:12:6b:6e:c7:87:f9:38:17:fb:2a:7c:c2:a4:f4:65:b3:75:f7:be:af:45:be:e2:ec:ae:36

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.1and1.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.1and1.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.1and1.it
1and1.it

Other certificates including the domain name 1and1.it

(limited to 100 certificates)
kontakt.1und1.de
postmaster-contact.1und1.de
sitoweb.1and1.it
password.1and1.it
mike.1und1.de
shop.1and1.it
account.1and1.it
passwort.ionos.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
login.ionos.de
account.1and1.it
1.exchange.1and1.eu
incapsula.com
incapsula.com
newsroom.1und1.de
domain-center.1and1.it
incapsula.com
webmail.1and1.it
digital-success.ionos.de
login.ionos.de
domain-center.1und1.de
www.email.1and1.it
newsroom.1and1.it
incapsula.com
newsroom.1und1.de
newsroom.1und1.de
ias.1and1.it
incapsula.com
incapsula.com
redirect.1and1.it
mywebsite.1and1.it
testing.rankingcoach.1und1.de
www.1and1.com
incapsula.com
incapsula.com
domain-center.1and1.it
ias.1und1.de
incapsula.com
smtp.1and1.it
xadmin.1.exchange.1and1.eu
digital-success.ionos.de
postmaster-contact.1und1.de
vertrag.1und1.de
vertrag.1und1.de
domains-center.1and1.it
postmaster-contact.1und1.de
sitoweb.1and1.it
newsroom.1and1.it
mywebsite.1and1.it
incapsula.com
incapsula.com
www.email.1and1.it
kontakt.1und1.de
cloudpanel.1und1.de
incapsula.com
mywebsite.1and1.it
webmail.1and1.it
aiuto.1and1.it
ias.1and1.it
kontakt.1und1.de
navigation.1und1.de
kontakt.1und1.de
kontakt.1und1.de
navigation.1and1.it
ntld-status.1and1.it
redirect.1and1.it
cloudpanel.1und1.de
webanalytics.1und1.de
incapsula.com
navigation.1and1.it
pop.1and1.it
login.1and1.it
mywebsite.1and1.it
contatti.1and1.it
webanalytics-reports.1und1.de
m.aiuto.1and1.it
digital-success.1and1.it
xadmin.exchange.ionos.eu
contratto.1and1.it
www.1and1.it
imap.1and1.it
www.1and1.it
vertrag.1und1.de
incapsula.com
m.aiuto.1and1.it
dav.mailxchange.1and1.it
incapsula.com
ntld-status.1and1.it
social.1and1.it
www.1and1.it
xadmin.exchange.1and1.eu
contatti.1and1.it
shop.1and1.it
incapsula.com
vertrag.1und1.de
account.1and1.it
www.social.1and1.it
analisi.1and1.it
newsroom.1and1.it

Certificate

The complete raw certificate details for www.1and1.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoxxVDgn4gJLlUXE76VD
X9/rBj1QtJipuo3vpmykO/KApa+RisV8AGusmaIxLzHYd+xCq7ClMIMmFuLkifH2
mHS9ut1ubpuR20GQDLdrr+rDblH2XkjgTkt1g13uxvZlgPLtDs03cx4r/ITIZPY3
W4ehvW03tUayR8/NNhMJOgj3NvBlhddzNtnYtHPY/jHYBgfJtaooMnGksbK/I9XV
uVcRn7sGD7ipS/4ej6g368vry9My0BvP2qDibPu68uIcf3ncYHicrZ31usW3Xkr+
DBZ+7ct0DqzwMIYe9D+lqEdkljYeUiZkj8WX/UMVO4W0WilgHalFM0RfxWWw9h7a
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5395573602707394241967061133341294942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1and1.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22539673156220371135593401915919485472402583646013181803450620586595936048580509732730457100380997983977334853890670417446629619832400109941672215109684076341611004730667411042937895371740191457098511218648858609978477146119310787738914973092731287133455227781175405778370046411241079150042568719425900986331994972850224327399832120731334411468382983132895117678679435642346862742192168215536262656777253964557209549995951368375488197118584604083485291487722318394096816237574957232532545075151372917724523174200029361174987994760990950094969812994825458524529496851666117333846429846737763328796515390926733549951701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							914521a7d2e8e7e9f8f64a2714f1470372506850
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1and1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1and1.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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