xadmin.exchange.1and1.us

- IONOS Inc. -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0c:e9:10:ea:a5:2c:c0:18:07:68:4f:59:09:f5:f4:66 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IONOS Inc.

Company registration number: 3658311
Organization: IONOS Inc.
State / Province: Pennsylvania
Locality: Chesterbrook
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e9:10:ea:a5:2c:c0:18:07:68:4f:59:09:f5:f4:66
Serial Number (int): 17160884226520418571080382977244787814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:c2:aa:81:0c:d9:82:fe:62:41:3b:b7:22:f2:55:00:a0:c3:34:49
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 7d:d5:d4:ef:b1:4c:68:33:cb:18:0d:1f:14:ce:5d:2f:d7:ff:2d:36
Fingerprint (sha256): e2:03:d1:33:30:8d:09:c4:ca:09:4c:39:d9:13:ed:1d:6b:21:71:4f:fb:15:e1:16:5b:81:cf:6c:b6:85:89:09

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate xadmin.exchange.1and1.us

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xadmin.exchange.1and1.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xadmin.exchange.1and1.us
xadmin.exchange.1and1.com
xadmin.exchange.1and1.mx
xadmin.exchange.ionos.us
xadmin.exchange.ionos.com

Other certificates including the domain name 1and1.us

(limited to 100 certificates)
mike.1und1.de
xadmin.exchange.1and1.us
1.exchange.1and1.us
xadmin.exchange.1and1.us
1.exchange.1and1.us
xadmin.exchange.1and1.us
exchange.1and1.com
1.exchange.1and1.us
xadmin.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
mike.1und1.de
1.exchange.1and1.us
xadmin.exchange.1and1.us
xadmin.exchange.1and1.us
exchange2019.ionos.com
mike.1und1.de
1.exchange.1and1.us
1.exchange.1and1.us
mike.1und1.de
xadmin.exchange.1and1.us
xadmin.exchange.1and1.us
exchange.1and1.com
xadmin.exchange.1and1.us
1.exchange.1and1.us
xadmin.exchange.1and1.us
xadmin.exchange.1and1.us
1.exchange.1and1.us
xadmin.exchange.1and1.us
mike.1und1.de
mike.1und1.de
xadmin.exchange.1and1.us
xadmin.exchange.1and1.us
1.exchange.1and1.us
1.exchange.1and1.us
mike.1und1.de
1.exchange.1and1.us
1.exchange.1and1.us

Certificate

The complete raw certificate details for xadmin.exchange.1and1.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17160884226520418571080382977244787814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3658311'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chesterbrook'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IONOS Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xadmin.exchange.1and1.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897177057840741376998374770440887635155022815079699661869759977090686188697275396442919163558575318434195449113162157288596244274762411021294478172410019518252837395570788554490447673614093708267466681594268851438172655706655167837464637805821725151732562360154976246296791974073874540265951889648247967017084125669157897388262495385567177151465729916051790540598776070770906655323276891539163817502562632385089949299309418849706662784517070816864741312044576049878781231655177956585800669356876874392250424487690654661441930706911335997071260901875505504034998799897600019427511328610218767941676107794481086933227064310582442078055506979355746356992194580603484402694438203162638621154050351513656066049635909208977645656691523182874749972391299176647605470868125337916107736558877973253478628820927812353733069599009189722581365272775362902215496166311155579273460284070693864399144330125245145531809305434745190771114103455120981714154276857247864792303242326721649456693390560584974385678712226433460950081402137379206945815034373946882331044176178552596977707201106433982782349443284794150688729460506461900799064420878771810497567182435544593081420750405780478797823051808349814215570143323117604486388521102698016083413774669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dc2aa810cd982fe62413bb722f25500a0c33449
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.1and1.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xadmin.exchange.ionos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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