vge-mktg-secure.vodafone.com

- Vodafone Group -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:1b:6b:1d:9e:30:cf:6e:52:76:22:ce:00:01:00:1b:6b:1d was issued on by Vodafone Group.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)

Vodafone Group

Organization: Vodafone Group
Organization unit: Vodafone Global Enterprise
State / Province: Berkshire
Locality: Newbury
Country: GB

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:1b:6b:1d:9e:30:cf:6e:52:76:22:ce:00:01:00:1b:6b:1d
Serial Number (int): 2653798008630231664930718322560860166981118749
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 0c:8e:2c:1a:e4:9e:4a:d8:50:89:88:02:35:28:b6:11:17:88:24:d2
AuthorityKeyId: 54:71:e4:33:4e:e5:a8:a9:30:b7:c7:29:6c:e0:d8:12:1f:c3:9d:b8

Fingerprint (sha1): c4:6f:a8:bc:3c:5f:f3:fa:be:6d:19:b3:12:12:33:4b:16:7b:e6:89
Fingerprint (sha256): 00:25:41:75:dc:e4:3d:98:91:f2:5a:2b:5b:79:1c:46:d1:7f:71:4a:26:46:a2:b3:13:51:dc:6f:c2:43:85:ab

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl

Check the revocation status for certificate vge-mktg-secure.vodafone.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vge-mktg-secure.vodafone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name vodafone.com

(limited to 100 certificates)
hr.evo.vodafone.com
idm.vodafone.com
asbc41.ims.spe02.vodafone.com
mssit.developer.vodafone.com
vge-mktg-secure.vodafone.com
www.vodafone.com
firebaseapp.com
srm-stage.vodafone.com
firebaseapp.com
vfeact.vodafone.test.vf-pt.internal.vodafone.com
ppoutlook-north.vodafone.com
gned-preprod.jira.agile.vodafone.com
preprod.mobile.securenet.vodafone.com
vogeportal.vodafone.com
vdslabs.vodafone.com
vfg-citrix-ext.vodafone.com
vgrm88hr.dc.sedc.internal.vodafone.com
egw1.vodafone.com
mytst.vodafone.test.vf-pt.internal.vodafone.com
firebaseapp.com
vfcmsload.vodafone.com
skype.internal.vodafone.com
degudent-vsp.vodafone.com
scorecard.evo.vodafone.com
ciscosdwan-stg.vodafone.com
asbc95.ims.spe02.vodafone.com
preprodapi.leap.vodafone.com
admin.footfall-sit.vodafone.com
vgddp538hr.dc.sedc.internal.vodafone.com
avospi01w.internal.vodafone.com
mft.vodafone.com
mgmt-zone.spe02.vodafone.com
wctfevip.webchat.vodafone.com
vADC243_Telco_CRM_WEB.internal.vodafone.com
vfghcatumfl1p.internal.vodafone.com
testreqpro.internal.vodafone.com
dm-uat-sentry.vodafone.com
WCPPC1X.webchat.vodafone.com
vmrdemo.vodafone.com
gaservice.prdrt.esb.vodafone.com
firebaseapp.com
xone.vodafone.com
www.connectedcomms.vodafone.com
org.tst.al.vmt.vodafone.com
blueprint-test.sp.vodafone.com
mail06.vodafone.com
corporate-federation.vodafone.com
IENTA1VW.vf-ie.internal.vodafone.com
iedocbvr.admnet.vodafone.com
srm.vodafone.com
itd.askonlineuk.vodafone.com
m2mprdgui.vodafone.com
itsm81.vodafone.com
externaltube.vodafone.com
dublin.oneview.vodafone.com
heineken-atlas.vodafone.com
ace-test.internal.vodafone.com
api-dub.developer.vodafone.com
firebaseapp.com
csg-live-covid-neuron.bdp.vodafone.com
ns1.dc-uk.vodafone.com
wcs.pre.eol.vodafone.com
nexus.r3ms2.k8s.eu-central-1.aws.cps.vodafone.com
splunk-dep.internal.vodafone.com
staging.addressbook.vodafone.com
sobe-pp.vodafone.com
gateway.d.evo.vodafone.com
cap2.cw.com
wellbeing.vodafone.com
swift-uat2.vodafone.com
skype-covid.internal.vodafone.com
ppprn01vw.ppinternal.vodafone.com
vfuk-enterprise-citrix-ext.vodafone.com
mdm.vodafone.co.uk
www.my-rewards.co.uk
business.vodafone.com
derat2is03.mono-zone.spe02.vodafone.com
jira-preprod.sp.vodafone.com
vsdm-as-stage.vodafone.com
m-ava-ld-web1.magic.vodafone.com
au.partnersappm.vodafone.com
m-gic-ld-web2.magic.vodafone.com
ssp.vodafone.com
test.analytics.vodafone.com
itcra.vodafone.com
*.eightfold.ai
firebaseapp.com
smartautoweb.smartlife.vodafone.com
contentdev.askonlinegrp2.vodafone.com
imperva.com
localitd.askonlinede.vodafone.com
firebaseapp.com
prod.proton.start.vodafone.com
uctoolkit.vodafone.com
securesim.vodafone.com
pcztest-citrix-maint.ppinternal.vodafone.com
webhostr2-01.pre.ciam.sp.vodafone.com
www.my-rewards.co.uk
firebaseapp.com
nql.vodafone.com

Certificate

The complete raw certificate details for vge-mktg-secure.vodafone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7hXP9IN9depezbHyJ40
vVmHtWa24ye0D/7E6HMcrvBb3hOC0lLrtbMBqNa6z5FF+80FYLPfY14qRz9cNq5N
+EZYEjoJzar4HVmjLXQr+dML1YI65IEWfvhZvEObTDCKbw304zlxamVySOh6CW1O
qAks7g2XpEBexl0U5iNEJ0XV0PfaYyY3OlrlO+oHBmSwQ+ke0J2IM2H1pehLyiD3
P66AGXXRaW3tkosQ04kCQHUYfuLGAgKYpYzxE2bOnRta6/3elW0yP0PwJvZnrATm
9fZ44qDZyDNUWInwhIr3y3AjX/O7M0JV9EO9ZcL8y834rPwQyAspqZUm1qXVgns5
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653798008630231664930718322560860166981118749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-09 15:10:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 15:10:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Newbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Global Enterprise'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vge-mktg-secure.vodafone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26222230973078006699363316030825777700212664442218349753965267187738073356623546355692723274199431816043109081380387900596992461990936265681012216519139829578990548701053438304392850657995885105854258070887285331101072399763995305629174307314096324047432544623832871672852422062875842526008847951137725964677693061911195932226131337016947738823201524898884033111674941914210485436855659857921661936197969544602919362110733594973336461946683702418577704379065722454756549738836143376050807838157556823772284648586755436793073772114336590615384374230187663989364993209777334778145215627604041669345924611759337956391359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c8e2c1ae49e4ad8508988023528b611178824d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5471e4334ee5a8a930b7c7296ce0d8121fc39db8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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