WCPPC1X.webchat.vodafone.com

- Vodafone GIS -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:1b:35:49:4e:5c:7b:65:45:10:a6:d4:00:01:00:1b:35:49 was issued on by Vodafone Group.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vodafone GIS

Organization: Vodafone GIS
Organization unit: EWA
State / Province: NRW
Locality: Ratingen
Country: DE

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:1b:35:49:4e:5c:7b:65:45:10:a6:d4:00:01:00:1b:35:49
Serial Number (int): 2653797937078761821583967675219160089809859913
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 19:65:12:54:5b:2e:26:e5:a5:96:83:37:4f:f0:1a:35:dc:7c:00:77
AuthorityKeyId: 54:71:e4:33:4e:e5:a8:a9:30:b7:c7:29:6c:e0:d8:12:1f:c3:9d:b8

Fingerprint (sha1): 51:8c:15:21:69:86:b4:79:d1:76:16:c9:a4:7c:9a:95:c2:4a:dc:00
Fingerprint (sha256): 00:b4:62:04:ab:f3:11:11:18:4f:da:d9:18:8c:e3:95:69:09:ab:33:1b:75:8b:4f:08:84:84:e2:89:99:5a:87

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl

Check the revocation status for certificate WCPPC1X.webchat.vodafone.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for WCPPC1X.webchat.vodafone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name vodafone.com

(limited to 100 certificates)
hr.evo.vodafone.com
idm.vodafone.com
asbc41.ims.spe02.vodafone.com
mssit.developer.vodafone.com
vge-mktg-secure.vodafone.com
www.vodafone.com
firebaseapp.com
srm-stage.vodafone.com
firebaseapp.com
vfeact.vodafone.test.vf-pt.internal.vodafone.com
ppoutlook-north.vodafone.com
gned-preprod.jira.agile.vodafone.com
preprod.mobile.securenet.vodafone.com
vogeportal.vodafone.com
vdslabs.vodafone.com
vfg-citrix-ext.vodafone.com
vgrm88hr.dc.sedc.internal.vodafone.com
egw1.vodafone.com
mytst.vodafone.test.vf-pt.internal.vodafone.com
firebaseapp.com
vfcmsload.vodafone.com
skype.internal.vodafone.com
degudent-vsp.vodafone.com
scorecard.evo.vodafone.com
ciscosdwan-stg.vodafone.com
asbc95.ims.spe02.vodafone.com
preprodapi.leap.vodafone.com
admin.footfall-sit.vodafone.com
vgddp538hr.dc.sedc.internal.vodafone.com
avospi01w.internal.vodafone.com
mft.vodafone.com
mgmt-zone.spe02.vodafone.com
wctfevip.webchat.vodafone.com
vADC243_Telco_CRM_WEB.internal.vodafone.com
vfghcatumfl1p.internal.vodafone.com
testreqpro.internal.vodafone.com
dm-uat-sentry.vodafone.com
WCPPC1X.webchat.vodafone.com
vmrdemo.vodafone.com
gaservice.prdrt.esb.vodafone.com
firebaseapp.com
xone.vodafone.com
www.connectedcomms.vodafone.com
org.tst.al.vmt.vodafone.com
blueprint-test.sp.vodafone.com
mail06.vodafone.com
corporate-federation.vodafone.com
IENTA1VW.vf-ie.internal.vodafone.com
iedocbvr.admnet.vodafone.com
srm.vodafone.com
itd.askonlineuk.vodafone.com
m2mprdgui.vodafone.com
itsm81.vodafone.com
externaltube.vodafone.com
dublin.oneview.vodafone.com
heineken-atlas.vodafone.com
ace-test.internal.vodafone.com
api-dub.developer.vodafone.com
firebaseapp.com
csg-live-covid-neuron.bdp.vodafone.com
ns1.dc-uk.vodafone.com
wcs.pre.eol.vodafone.com
nexus.r3ms2.k8s.eu-central-1.aws.cps.vodafone.com
splunk-dep.internal.vodafone.com
staging.addressbook.vodafone.com
sobe-pp.vodafone.com
gateway.d.evo.vodafone.com
cap2.cw.com
wellbeing.vodafone.com
swift-uat2.vodafone.com
skype-covid.internal.vodafone.com
ppprn01vw.ppinternal.vodafone.com
vfuk-enterprise-citrix-ext.vodafone.com
mdm.vodafone.co.uk
www.my-rewards.co.uk
business.vodafone.com
derat2is03.mono-zone.spe02.vodafone.com
jira-preprod.sp.vodafone.com
vsdm-as-stage.vodafone.com
m-ava-ld-web1.magic.vodafone.com
au.partnersappm.vodafone.com
m-gic-ld-web2.magic.vodafone.com
ssp.vodafone.com
test.analytics.vodafone.com
itcra.vodafone.com
*.eightfold.ai
firebaseapp.com
smartautoweb.smartlife.vodafone.com
contentdev.askonlinegrp2.vodafone.com
imperva.com
localitd.askonlinede.vodafone.com
firebaseapp.com
prod.proton.start.vodafone.com
uctoolkit.vodafone.com
securesim.vodafone.com
pcztest-citrix-maint.ppinternal.vodafone.com
webhostr2-01.pre.ciam.sp.vodafone.com
www.my-rewards.co.uk
firebaseapp.com
nql.vodafone.com

Certificate

The complete raw certificate details for WCPPC1X.webchat.vodafone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYwK9LAgmfA/RozygDOe
fYn41fibpqvlFB88ELnB/nXDpHyfIZOsQXd8Ugmy1qVYyjS0YTmj6nHr4kf+3FP4
pi4NerHdcoSd/nNI4+oQfa2hRyvJ5mhBqOOuw9Rhdvl0WJ/sPiTmyZD+C25wY16J
gZuw0wqBDR0ugw1bNbCVsxqJicUrMz4XQ1JlR0N9XZu1/AvxwEtRH1r1RkzrEpVg
fVddagzwcuQy2F9j7EoOIclQl+ba4XZRWbW6q+4zYhnY3sigKqC7sF80G/pboBDq
ZllHCmHXb3V/46e8ndtSZTtMThBRYIsTFHRnSvoROOYKeP4hDGe32R2S0BVrDfZ2
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653797937078761821583967675219160089809859913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-08 12:59:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 12:59:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ratingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WCPPC1X.webchat.vodafone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25947910194634757628960685002404930977623519892471619882427297705870848525237007121330119497866281335724292830130483194244851581432090300048784087623554851207449940270032594690830228679533208653746967280600644003731156787854307905679803247076830524134514351134293993184709862758483481885312070919647917337861293224039637385048352097621146836735963016269996707310243517806990816634184096316329659348770957781481213505149364829939576986167914737482617865846608857776037097766443566118413238587253289223079302739828654478366719788606193139861467944764539167148967521403756998265148737706015883741863688642907859399898799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							196512545b2e26e5a59683374ff01a35dc7c0077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5471e4334ee5a8a930b7c7296ce0d8121fc39db8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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