analisi.1and1.it

- 1&1 Internet SE -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 75:d2:9e:17:09:4f:88:1a:01:e6:4a:1c:7f:1b:c8:0a was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

1&1 Internet SE

Organization: 1&1 Internet SE
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 75:d2:9e:17:09:4f:88:1a:01:e6:4a:1c:7f:1b:c8:0a
Serial Number (int): 156613264292974098673479134435606251530
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 1c:3c:12:ed:9c:03:07:20:f0:4d:ad:21:94:69:0c:c9:dc:a3:fb:68
Fingerprint (sha256): 31:5f:4c:93:47:91:11:2c:db:d1:eb:1e:ab:3d:05:4e:e5:2d:4f:d8:7d:25:0a:34:91:eb:18:83:0f:e2:4f:ad

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate analisi.1and1.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analisi.1and1.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analisi.1and1.it

Other certificates including the domain name 1and1.it

(limited to 100 certificates)
kontakt.1und1.de
postmaster-contact.1und1.de
sitoweb.1and1.it
password.1and1.it
mike.1und1.de
shop.1and1.it
account.1and1.it
passwort.ionos.de
testing.rankingcoach.1und1.de
location-marketing.1und1.de
login.ionos.de
account.1and1.it
1.exchange.1and1.eu
incapsula.com
incapsula.com
newsroom.1und1.de
domain-center.1and1.it
incapsula.com
webmail.1and1.it
digital-success.ionos.de
login.ionos.de
domain-center.1und1.de
www.email.1and1.it
newsroom.1and1.it
incapsula.com
newsroom.1und1.de
newsroom.1und1.de
ias.1and1.it
incapsula.com
incapsula.com
redirect.1and1.it
mywebsite.1and1.it
testing.rankingcoach.1und1.de
www.1and1.com
incapsula.com
incapsula.com
domain-center.1and1.it
ias.1und1.de
incapsula.com
smtp.1and1.it
xadmin.1.exchange.1and1.eu
digital-success.ionos.de
postmaster-contact.1und1.de
vertrag.1und1.de
vertrag.1und1.de
domains-center.1and1.it
postmaster-contact.1und1.de
sitoweb.1and1.it
newsroom.1and1.it
mywebsite.1and1.it
incapsula.com
incapsula.com
www.email.1and1.it
kontakt.1und1.de
cloudpanel.1und1.de
incapsula.com
mywebsite.1and1.it
webmail.1and1.it
aiuto.1and1.it
ias.1and1.it
kontakt.1und1.de
navigation.1und1.de
kontakt.1und1.de
kontakt.1und1.de
navigation.1and1.it
ntld-status.1and1.it
redirect.1and1.it
cloudpanel.1und1.de
webanalytics.1und1.de
incapsula.com
navigation.1and1.it
pop.1and1.it
login.1and1.it
mywebsite.1and1.it
contatti.1and1.it
webanalytics-reports.1und1.de
m.aiuto.1and1.it
digital-success.1and1.it
xadmin.exchange.ionos.eu
contratto.1and1.it
www.1and1.it
imap.1and1.it
www.1and1.it
vertrag.1und1.de
incapsula.com
m.aiuto.1and1.it
dav.mailxchange.1and1.it
incapsula.com
ntld-status.1and1.it
social.1and1.it
www.1and1.it
xadmin.exchange.1and1.eu
contatti.1and1.it
shop.1and1.it
incapsula.com
vertrag.1und1.de
account.1and1.it
www.social.1and1.it
analisi.1and1.it
newsroom.1and1.it

Certificate

The complete raw certificate details for analisi.1and1.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156613264292974098673479134435606251530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Internet SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'analisi.1and1.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760603224395007341695148988508968973793199681218552574796097510762125050233293921921406571288672385409839720771273061602385912962311131060720655067404032161407999728463366489587491246540297783582008093038426097220160483419957780048142418141533728113884384984892139676489323029034288168637402154146456298780360389183433905464379334937783811481505259596320940259424297244771015524651352774205993567818290652316969293138275194373099312738496491445442839198072347322217582840280067866721117485626605928398604290273101463172780042625521776418474512885164430604566084766602010768378769363175667319451894414374956881546146227831880935459614002395463206386191825174173308756429246059788842536873209481882279509779335444809603982311361120426708936866031301026069695915649216794524098168900085572793905730399176090298971535245611455277767352466104742379839956500387813952565001433308201982033937547603137879918571225937189654794583343451934879837028745644841891449694925046096869073220309236078103914913816576041521453513318877877317239605632393452381088976655580434470718322712602907051746347778625582118720698543157710078614570225710633737772972058507332469098449361434147916741384236833751281062959288059858609933667744054857422889318757879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analisi.1and1.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159879faefc0000040300483046022100ee674b0c0de279a69ed7b9af0c260bae42d55a050629cc260a672d265f8af84d022100b3a99d1a0727f0a1b5875e0392cb251f565a04c238d300ee142ae8911e2caa3c007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000159879faf440000040300473045022100d7cfc3eec372e6abddb4947c6ff3ff298f8a05d21f2ef5aac8b63e0f1cca0849022040bfe26be7c9d029fa0b52077d40c34530655bc1cde67cb152fa36ba3ee1b8a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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