*.ui-portal.de

- 1&1 Mail & Media GmbH -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:68:63:f0:9f:2b:31:44:39:a5:1f:11:2f:b9:3a:ba was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

1&1 Mail & Media GmbH

Organization: 1&1 Mail & Media GmbH
State / Province: Rheinland-Pfalz
Locality: Montabaur
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:68:63:f0:9f:2b:31:44:39:a5:1f:11:2f:b9:3a:ba
Serial Number (int): 8517393870567215275930320204958612154
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f9:ac:0a:18:20:48:70:32:ff:0c:44:15:ee:4b:8f:61:a4:e3:40:d0
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0a:be:b6:ee:5c:22:fb:b7:04:a7:2c:c8:78:da:5c:35:e0:20:4f:a9
Fingerprint (sha256): a7:13:99:34:ce:d0:d5:e5:fc:59:6b:14:82:78:a6:a6:c8:42:90:07:7e:e3:40:1b:8f:f0:4f:66:13:93:2c:45

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.ui-portal.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ui-portal.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ui-portal.de

Other certificates including the domain name ui-portal.de

(limited to 100 certificates)
img.ui-portal.de
img.ui-portal.de
px.wa.ui-portal.de
wa.ui-portal.de
contract-qs.ui-portal.de
img.ui-portal.de
login.ui-portal.de
js.ui-portal.de
img.ui-portal.de
img.ui-portal.de
login.ui-portal.de
wa.ui-portal.de
afb.ui-portal.de
img.ui-portal.de
wa.ui-portal.de
contract-qs.ui-portal.de
www2.webbaukasten.ui-portal.de
px.wa.ui-portal.de
img.ui-portal.de
*.ui-portal.de
img-pool.ui-portal.de
img.ui-portal.de
img.ui-portal.de
*.ui-portal.de
www1.webbaukasten.ui-portal.de
img.ui-portal.de
*.ui-portal.de
www2.webbaukasten-demo.ui-portal.de
www3.webbaukasten.ui-portal.de
img.ui-portal.de
img.ui-portal.de
wa.ui-portal.de
r.ui-portal.de
*.ui-portal.de
img.ui-portal.de
px.wa.ui-portal.de
*.ui-portal.de
px.wa.ui-portal.de
px.wa.ui-portal.de
*.ui-portal.de
img.ui-portal.de
px.wa.ui-portal.de
img.ui-portal.de
webbaukasten.ui-portal.de
img.ui-portal.de
img.ui-portal.de
px.wa.ui-portal.de
*.ui-portal.de
px.wa.ui-portal.de
img.ui-portal.de
img.ui-portal.de
*.ui-portal.de
contract-pre.ui-portal.de
px.wa.ui-portal.de
img-eue.ui-portal.de
img-eue.ui-portal.de
img.ui-portal.de
*.ui-portal.de
img.ui-portal.de
contract.ui-portal.de
www1.webbaukasten.ui-portal.de
img.ui-portal.de
px.wa.ui-portal.de
px.wa.ui-portal.de
img.ui-portal.de
contract.ui-portal.de
img.ui-portal.de
www1.webbaukasten-demo.ui-portal.de
sms-alert.ui-portal.de
images.ui-portal.de
www3.webbaukasten.ui-portal.de
img.ui-portal.de
img.ui-portal.de
www2.webbaukasten.ui-portal.de
r.ui-portal.de
px.wa.ui-portal.de
img.ui-portal.de
r.ui-portal.de
img.ui-portal.de
img.ui-portal.de

Certificate

The complete raw certificate details for *.ui-portal.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9skr+sQ7aMmp2VNyKr4
qehsqdosNZFD/aEPg6heDXV2KUzqpRhHaktsgE+ZU5a1/zFtoGqjyFCQ0d4RrIJU
Xv4mU1JOLbRz2bg59hBLQAZB5PKWVTiATfqCJQ0Rls/qpmYePb3aL4zoSUGjEiAh
06s8pWjPQ1DqEu0CPatBgLoKE8xu1FGYwJCvzGug0ZjwTRZhhxqZttrMOQKPBBi4
4TUqmLpry9ZBYNc5XYHGNyxoiC9sBrm9MbujcXvmcn/qt+UAFzNZ8cZhnrkxKfx4
CgFYIscttM9Y1RBhRYsYH7qql06n3xkzI021dtRV5mYRXoRry9awDHbTBgJS2Lg9
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8517393870567215275930320204958612154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montabaur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '1&1 Mail & Media GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ui-portal.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23714626622053640018695367362228674709798818374916522225905240771853836187334039026450209238613826998386924086450033226587087195674072411772285638895414140503048656806236811286357481944290630140448804924358917558162566427851559510610765433132509623086709941568808791613996087446039906203994480662605391583974096508501508592348420312779871012996430041685458846170913249054483864282708856739954900055146470821654172993437644570531205367901202530557747063458879860734949523754111010251931903190184155241159501773493738343375835178735720739239941373751700402173744991095007699597117463030662963946223648837053387772542367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9ac0a1820487032ff0c4415ee4b8f61a4e340d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ui-portal.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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