*.ionto.de

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number de:79:06:57:64:82:11:da:13:73:98:80:42:60:53:c3 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ionto.de

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): de:79:06:57:64:82:11:da:13:73:98:80:42:60:53:c3
Serial Number (int): 295717011602547544220423728863423517635
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8d:b3:7a:f7:d9:27:41:bd:83:58:7c:11:56:ff:a1:17:8a:67:5c:1b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 83:43:2e:fc:60:ba:a7:29:4c:20:eb:28:7d:3a:21:da:73:f2:e0:a3
Fingerprint (sha256): c4:2f:49:ff:5f:d2:c8:a6:32:2a:9e:a7:b3:28:8b:78:4a:77:9c:e6:30:99:f7:85:3e:37:f5:aa:6a:21:9e:bb

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/6ecR_BWGcJ4
CRL Distribution Point: http://crls.pki.goog/gts1p5/XKyfgl3pkrg.crl

Check the revocation status for certificate *.ionto.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ionto.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ionto.de
ionto.de

Other certificates including the domain name ionto.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.ionto.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BWJhHEEh62Lvn7GkKq+
1LM1jFdCpkh1JH2atscksadbt0BuuA+uceVmpqFXAHeoBkrLiyl88jl8HL/DEDaz
bVKNpGTyDT/LfUpMOD81j0t6udR8zOo2Pw+4yMO5/F8qdD4ZAD87XnMYrPXICM65
8ZLSP52eKKNdsCu1WYH2WLq0+OEbTLf4WzPFiE9IrWxod8Y5r3iriUQxHqN0g9vi
veuQlk7imJyHRtjjHBk7SVJQAfaGkKIUosNIfrwL+ocmWLy5OldjKF3WLRWTKPgo
ToGz1u7Uqc/zzMQxpMmg2zl6RMDm52/9RsSVzqCT20S1KGFoN8v7TH43tGNFYTT4
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295717011602547544220423728863423517635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 11:15:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 11:15:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ionto.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27278094250546523419368777041166525442977435602567143656564066671002333926824239369302809544335992600995141505533021003386626019474282452179463321623037080706982018827316978186270782208502395290814201351561467182176755797916133834552534343505800036344425357933509133085919759627311196608943771521835381984385347528743686554498084135663992731168856543949184266835790552692776506733117553319764170051446371722916328093559303951689603536096458296698890621538095639877339300842861422016483547697819903368040428826987832188134743578802556521445511575887197244403744773824685838535422979932363498674729106120747873748711473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8db37af7d92741bd83587c1156ffa1178a675c1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/6ecR_BWGcJ4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ionto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionto.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/XKyfgl3pkrg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018697f2a90e00000403004630440220237a2b19399393c3a606962bd2e83f7f1c187b9005cce4dedf5f006f0bbf996002201cc3844b59bec577fc9f9e5d23c08362a6fb8dbf02e2ff835791376bdbb92d500076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018697f2a90a00000403004730450220787d95424bce4135859d8e19ff975b53c55aa71c1c593d699672104af848ea87022100a3f3e92dc85eb775dd815180e3bb7294e492e1a91927e35ac0be1ae4638c0159
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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