mail06.vodafone.com

- Vodafone GIS -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:00:8d:d5:f6:5a:14:72:d1:be:61:ab:00:00:00:00:8d:d5 was issued on by Vodafone Group.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vodafone GIS

Organization: Vodafone GIS
Organization unit: EWA
State / Province: NRW
Locality: Ratingen
Country: DE

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:00:8d:d5:f6:5a:14:72:d1:be:61:ab:00:00:00:00:8d:d5
Serial Number (int): 2653788867157247400009439659850602383409188309
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: c5:16:b4:45:68:72:20:88:bb:58:ac:14:6e:91:ff:db:c9:3e:bf:c1
AuthorityKeyId: 68:33:ac:36:fb:87:ea:cb:e2:54:42:01:8e:f0:9c:f7:30:43:40:7d

Fingerprint (sha1): e3:88:d1:7d:65:21:5b:f5:50:5a:e7:4b:c7:a7:20:6b:84:41:a2:93
Fingerprint (sha256): 00:e2:4f:1b:a8:6f:c2:e4:08:27:7b:f1:6a:ea:a9:62:2a:00:2b:1c:7e:04:e7:ca:0a:f8:18:31:ee:ef:cc:ab

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009.cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009.crl

Check the revocation status for certificate mail06.vodafone.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail06.vodafone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name vodafone.com

(limited to 100 certificates)
hr.evo.vodafone.com
idm.vodafone.com
asbc41.ims.spe02.vodafone.com
mssit.developer.vodafone.com
vge-mktg-secure.vodafone.com
www.vodafone.com
firebaseapp.com
srm-stage.vodafone.com
firebaseapp.com
vfeact.vodafone.test.vf-pt.internal.vodafone.com
ppoutlook-north.vodafone.com
gned-preprod.jira.agile.vodafone.com
preprod.mobile.securenet.vodafone.com
vogeportal.vodafone.com
vdslabs.vodafone.com
vfg-citrix-ext.vodafone.com
vgrm88hr.dc.sedc.internal.vodafone.com
egw1.vodafone.com
mytst.vodafone.test.vf-pt.internal.vodafone.com
firebaseapp.com
vfcmsload.vodafone.com
skype.internal.vodafone.com
degudent-vsp.vodafone.com
scorecard.evo.vodafone.com
ciscosdwan-stg.vodafone.com
asbc95.ims.spe02.vodafone.com
preprodapi.leap.vodafone.com
admin.footfall-sit.vodafone.com
vgddp538hr.dc.sedc.internal.vodafone.com
avospi01w.internal.vodafone.com
mft.vodafone.com
mgmt-zone.spe02.vodafone.com
wctfevip.webchat.vodafone.com
vADC243_Telco_CRM_WEB.internal.vodafone.com
vfghcatumfl1p.internal.vodafone.com
testreqpro.internal.vodafone.com
dm-uat-sentry.vodafone.com
WCPPC1X.webchat.vodafone.com
vmrdemo.vodafone.com
gaservice.prdrt.esb.vodafone.com
firebaseapp.com
xone.vodafone.com
www.connectedcomms.vodafone.com
org.tst.al.vmt.vodafone.com
blueprint-test.sp.vodafone.com
mail06.vodafone.com
corporate-federation.vodafone.com
IENTA1VW.vf-ie.internal.vodafone.com
iedocbvr.admnet.vodafone.com
srm.vodafone.com
itd.askonlineuk.vodafone.com
m2mprdgui.vodafone.com
itsm81.vodafone.com
externaltube.vodafone.com
dublin.oneview.vodafone.com
heineken-atlas.vodafone.com
ace-test.internal.vodafone.com
api-dub.developer.vodafone.com
firebaseapp.com
csg-live-covid-neuron.bdp.vodafone.com
ns1.dc-uk.vodafone.com
wcs.pre.eol.vodafone.com
nexus.r3ms2.k8s.eu-central-1.aws.cps.vodafone.com
splunk-dep.internal.vodafone.com
staging.addressbook.vodafone.com
sobe-pp.vodafone.com
gateway.d.evo.vodafone.com
cap2.cw.com
wellbeing.vodafone.com
swift-uat2.vodafone.com
skype-covid.internal.vodafone.com
ppprn01vw.ppinternal.vodafone.com
vfuk-enterprise-citrix-ext.vodafone.com
mdm.vodafone.co.uk
www.my-rewards.co.uk
business.vodafone.com
derat2is03.mono-zone.spe02.vodafone.com
jira-preprod.sp.vodafone.com
vsdm-as-stage.vodafone.com
m-ava-ld-web1.magic.vodafone.com
au.partnersappm.vodafone.com
m-gic-ld-web2.magic.vodafone.com
ssp.vodafone.com
test.analytics.vodafone.com
itcra.vodafone.com
*.eightfold.ai
firebaseapp.com
smartautoweb.smartlife.vodafone.com
contentdev.askonlinegrp2.vodafone.com
imperva.com
localitd.askonlinede.vodafone.com
firebaseapp.com
prod.proton.start.vodafone.com
uctoolkit.vodafone.com
securesim.vodafone.com
pcztest-citrix-maint.ppinternal.vodafone.com
webhostr2-01.pre.ciam.sp.vodafone.com
www.my-rewards.co.uk
firebaseapp.com
nql.vodafone.com

Certificate

The complete raw certificate details for mail06.vodafone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0neP/VABUBMPW6ES7AW/
OML6/QhIcci5BQUuI0nApya6HIfh3AFYOxOfoWt+zKrycbSiRRWgc9JC62rkVvze
QntNuc/2vlCth67dn3LfEH8wdjSlhWLLVjbx6uL1eQrXQUiAbR7PAfo5lTV97nnj
SQo5oDqadLK8rC0/4svEMCWYtfHDcbdv4CoRSpZsPM2R+c9Ax0wVl5zHkInchxsL
+x/wA0EFukZdW+3m4PeG/wTSRPJbRD755DuDzhg9NI1sTFV6025Y/4Z+2vGTNidR
ezk7GYCjIuYmcMVg8mccI/qNICn9caYrf14gVhpbzBYqsQ/VlCSkT6vRmL3sv4hh
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653788867157247400009439659850602383409188309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-09 14:21:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-09 14:21:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ratingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail06.vodafone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26569002488812791592283926985990599323210973156542236174290352853503577027782957663108971838767928330114813230908932211891460503344491455642095472535932022521828924605286618094642929638483362897569516646412548665523106471477826990869730075712450360416984400580909694048998402171070974813371771129226583969127016451525630794876647864889711365974801397453417862598221939679604453058542364996009502364271187104253202347825437590929977684079027610207156716550884971272726616691789767699430558486555856887328723198058903772893284517246588109945512712224735386132422134379188282602383061608250554872258309087610857614500343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c516b44568722088bb58ac146e91ffdbc93ebfc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6833ac36fb87eacbe25442018ef09cf73043407d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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