www.1and1.it

- IONOS SE -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:f0:ce:b6:74:12:da:a4:de:59:30:2a:58:f2:0b:87 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS SE

Organization: IONOS SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f0:ce:b6:74:12:da:a4:de:59:30:2a:58:f2:0b:87
Serial Number (int): 3908799869445174538081983474366024583
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bc:5c:b1:80:d0:66:ad:6e:0f:b5:88:7f:53:d8:5a:f0:2b:7c:16:de
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 82:26:d2:1f:d9:5a:b8:e9:c4:ba:a7:bb:8b:37:eb:95:1b:3a:32:40
Fingerprint (sha256): 2b:59:dd:1d:5b:3b:d8:af:56:e5:fb:24:6b:74:0c:44:22:8c:03:67:3d:2a:3e:90:61:27:1f:82:54:6c:b3:57

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.1and1.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.1and1.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.1and1.it
1and1.it

Other certificates including the domain name 1and1.it

(limited to 100 certificates)
kontakt.1und1.de
postmaster-contact.1und1.de
sitoweb.1and1.it
password.1and1.it
mike.1und1.de
shop.1and1.it
account.1and1.it
passwort.ionos.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
login.ionos.de
account.1and1.it
1.exchange.1and1.eu
incapsula.com
incapsula.com
newsroom.1und1.de
domain-center.1and1.it
incapsula.com
webmail.1and1.it
digital-success.ionos.de
login.ionos.de
domain-center.1und1.de
www.email.1and1.it
newsroom.1and1.it
incapsula.com
newsroom.1und1.de
newsroom.1und1.de
ias.1and1.it
incapsula.com
incapsula.com
redirect.1and1.it
mywebsite.1and1.it
testing.rankingcoach.1und1.de
www.1and1.com
incapsula.com
incapsula.com
domain-center.1and1.it
ias.1und1.de
incapsula.com
smtp.1and1.it
xadmin.1.exchange.1and1.eu
digital-success.ionos.de
postmaster-contact.1und1.de
vertrag.1und1.de
vertrag.1und1.de
domains-center.1and1.it
postmaster-contact.1und1.de
sitoweb.1and1.it
newsroom.1and1.it
mywebsite.1and1.it
incapsula.com
incapsula.com
www.email.1and1.it
kontakt.1und1.de
cloudpanel.1und1.de
incapsula.com
mywebsite.1and1.it
webmail.1and1.it
aiuto.1and1.it
ias.1and1.it
kontakt.1und1.de
navigation.1und1.de
kontakt.1und1.de
kontakt.1und1.de
navigation.1and1.it
ntld-status.1and1.it
redirect.1and1.it
cloudpanel.1und1.de
webanalytics.1und1.de
incapsula.com
navigation.1and1.it
pop.1and1.it
login.1and1.it
mywebsite.1and1.it
contatti.1and1.it
webanalytics-reports.1und1.de
m.aiuto.1and1.it
digital-success.1and1.it
xadmin.exchange.ionos.eu
contratto.1and1.it
www.1and1.it
imap.1and1.it
www.1and1.it
vertrag.1und1.de
incapsula.com
m.aiuto.1and1.it
dav.mailxchange.1and1.it
incapsula.com
ntld-status.1and1.it
social.1and1.it
www.1and1.it
xadmin.exchange.1and1.eu
contatti.1and1.it
shop.1and1.it
incapsula.com
vertrag.1und1.de
account.1and1.it
www.social.1and1.it
analisi.1and1.it
newsroom.1and1.it

Certificate

The complete raw certificate details for www.1and1.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WatxDDwm69Hd0Oe/Y/m
erD7hujYFWuRS7Ig9p4RxA8nPZ+lN4wNhWRNzQPqdALFWdFz73v1n/TqNHvi7yRl
GssLd+upI7rU0QLogIX82AtQs2hueaPpBcWjbDeG+L+b6U6v6hK66EgoXdNNz5wO
2MHVj0C5a6hvOeQU1ugSHkGEQ5Kbw6ys+SPEc/RTbG43eO9Z85wZHTD/IXquLv4R
T5w0ewtx7TTNZTaeoA25zzrXIW/xkH3BeHXP19Z+SzHE8gk+/ILBxqdZP5UUr8MN
2hFZHVxiNrDXsHpJCBd4onKYGYZY5RHJAmE6YdJzPCJYd/g1i6KhRA7WFPfuP+Ou
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3908799869445174538081983474366024583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1and1.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27444344968642796225878338820109453225320420963950289618478142257365682649041148929819374661664861066570491988823310291446648241985897343605247592934834776346911903394973689675044638436440545374429740386847780357871570273656177339193809059062886276724643311264405347347443797234353192216824826851245676986805299256048389083529871482695621486640268460205572520139646685051714129274507755048533981015346942806940128468097571095680260379412896267467027914294467192952561540727735583345473654703008656795284684426111779863663521391146902939621442216346485060461469024358855378449087416936676805967464218974739651761516219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc5cb180d066ad6e0fb5887f53d85af02b7c16de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1and1.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1and1.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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