srm.vodafone.com

- Vodafone GIS -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:00:9a:c6:79:0f:40:8a:cf:55:69:fb:00:01:00:00:9a:c6 was issued on by Vodafone Group.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vodafone GIS

Organization: Vodafone GIS
Organization unit: EWA
State / Province: NRW
Locality: Ratingen
Country: DE

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:00:9a:c6:79:0f:40:8a:cf:55:69:fb:00:01:00:00:9a:c6
Serial Number (int): 2653788884356785662669021835311643199933553350
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: cd:d0:4f:77:41:8d:3d:2c:2e:ea:07:b5:09:f0:85:01:70:a3:ac:e9
AuthorityKeyId: 54:71:e4:33:4e:e5:a8:a9:30:b7:c7:29:6c:e0:d8:12:1f:c3:9d:b8

Fingerprint (sha1): 96:f1:5b:07:87:14:b5:fe:07:ab:53:f4:af:5e:eb:3b:b5:b0:be:b4
Fingerprint (sha256): 00:ed:01:56:33:bc:d8:81:c2:a2:31:9e:81:da:56:41:ec:2b:01:85:e4:c9:d9:ee:8a:4f:7f:0f:e4:c2:01:33

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl

Check the revocation status for certificate srm.vodafone.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srm.vodafone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name vodafone.com

(limited to 100 certificates)
hr.evo.vodafone.com
idm.vodafone.com
asbc41.ims.spe02.vodafone.com
mssit.developer.vodafone.com
vge-mktg-secure.vodafone.com
www.vodafone.com
firebaseapp.com
srm-stage.vodafone.com
firebaseapp.com
vfeact.vodafone.test.vf-pt.internal.vodafone.com
ppoutlook-north.vodafone.com
gned-preprod.jira.agile.vodafone.com
preprod.mobile.securenet.vodafone.com
vogeportal.vodafone.com
vdslabs.vodafone.com
vfg-citrix-ext.vodafone.com
vgrm88hr.dc.sedc.internal.vodafone.com
egw1.vodafone.com
mytst.vodafone.test.vf-pt.internal.vodafone.com
firebaseapp.com
vfcmsload.vodafone.com
skype.internal.vodafone.com
degudent-vsp.vodafone.com
scorecard.evo.vodafone.com
ciscosdwan-stg.vodafone.com
asbc95.ims.spe02.vodafone.com
preprodapi.leap.vodafone.com
admin.footfall-sit.vodafone.com
vgddp538hr.dc.sedc.internal.vodafone.com
avospi01w.internal.vodafone.com
mft.vodafone.com
mgmt-zone.spe02.vodafone.com
wctfevip.webchat.vodafone.com
vADC243_Telco_CRM_WEB.internal.vodafone.com
vfghcatumfl1p.internal.vodafone.com
testreqpro.internal.vodafone.com
dm-uat-sentry.vodafone.com
WCPPC1X.webchat.vodafone.com
vmrdemo.vodafone.com
gaservice.prdrt.esb.vodafone.com
firebaseapp.com
xone.vodafone.com
www.connectedcomms.vodafone.com
org.tst.al.vmt.vodafone.com
blueprint-test.sp.vodafone.com
mail06.vodafone.com
corporate-federation.vodafone.com
IENTA1VW.vf-ie.internal.vodafone.com
iedocbvr.admnet.vodafone.com
srm.vodafone.com
itd.askonlineuk.vodafone.com
m2mprdgui.vodafone.com
itsm81.vodafone.com
externaltube.vodafone.com
dublin.oneview.vodafone.com
heineken-atlas.vodafone.com
ace-test.internal.vodafone.com
api-dub.developer.vodafone.com
firebaseapp.com
csg-live-covid-neuron.bdp.vodafone.com
ns1.dc-uk.vodafone.com
wcs.pre.eol.vodafone.com
nexus.r3ms2.k8s.eu-central-1.aws.cps.vodafone.com
splunk-dep.internal.vodafone.com
staging.addressbook.vodafone.com
sobe-pp.vodafone.com
gateway.d.evo.vodafone.com
cap2.cw.com
wellbeing.vodafone.com
swift-uat2.vodafone.com
skype-covid.internal.vodafone.com
ppprn01vw.ppinternal.vodafone.com
vfuk-enterprise-citrix-ext.vodafone.com
mdm.vodafone.co.uk
www.my-rewards.co.uk
business.vodafone.com
derat2is03.mono-zone.spe02.vodafone.com
jira-preprod.sp.vodafone.com
vsdm-as-stage.vodafone.com
m-ava-ld-web1.magic.vodafone.com
au.partnersappm.vodafone.com
m-gic-ld-web2.magic.vodafone.com
ssp.vodafone.com
test.analytics.vodafone.com
itcra.vodafone.com
*.eightfold.ai
firebaseapp.com
smartautoweb.smartlife.vodafone.com
contentdev.askonlinegrp2.vodafone.com
imperva.com
localitd.askonlinede.vodafone.com
firebaseapp.com
prod.proton.start.vodafone.com
uctoolkit.vodafone.com
securesim.vodafone.com
pcztest-citrix-maint.ppinternal.vodafone.com
webhostr2-01.pre.ciam.sp.vodafone.com
www.my-rewards.co.uk
firebaseapp.com
nql.vodafone.com

Certificate

The complete raw certificate details for srm.vodafone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgelAxyOpusgNayv66tZ
mxxk6kao5lwF2N6iOiKaPj1aPeW+UkwVoSJ53Of5oigsLLNcsdjPeoBd1FFpq79W
qVml7JPfTgsK55xtAzqAHBKcTsnXD6Fk6gWvGGMc2z+nip72gVBnzVto5Lm7OVKA
GKWlPPOdxjTKRepaTQUbOat6JJwuAnTBgdq/WcVL9dMh3u2WQyfgUvH1saN8EEfe
o3DxIzwK1LnuUZwzkUppVmkbxXO1OYY25YRc1y4B1CotK3GTzr/AUdHsAmg5/lVf
TgYmJLDSpaYt8NJJjri6f/9UdXqDz3+jglfsyA232XmcC8z/sp1MFNJUl+DdP2HE
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653788884356785662669021835311643199933553350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-29 10:14:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-28 10:14:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ratingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'srm.vodafone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26008860505277087190390837613423237967340961727227303823703684658869974150017003697451448775695055126512110156124345984435514276622218309631772738464423207983000978536183260620986957849289286425471963769652324538975181664258613435452601440137324620442421347790116296525442620549481644483217128302499319913855992013984748833378831332706061873719756479195497201257685873503236741610958027454712480917090065067361823749371360497506983252286023559287252257152049989823321448340696478053621819243721148469469286607295592784021618061485679022887322774788633658081677922179000202990760826533801667554794191266852347119256673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdd04f77418d3d2c2eea07b509f0850170a3ace9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5471e4334ee5a8a930b7c7296ce0d8121fc39db8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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