vsdm-as-stage.vodafone.com

- Vodafone GIS -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:00:95:c1:66:e8:76:5a:45:f6:57:d1:00:00:00:00:95:c1 was issued on by Vodafone Group.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vodafone GIS

Organization: Vodafone GIS
Organization unit: EWA
State / Province: NRW
Locality: Ratingen
Country: DE

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:00:95:c1:66:e8:76:5a:45:f6:57:d1:00:00:00:00:95:c1
Serial Number (int): 2653788877684316042834077919326590939099600321
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 98:10:0c:23:13:4f:60:d2:67:d1:fd:ce:30:4f:60:eb:e2:f5:e4:ee
AuthorityKeyId: 68:33:ac:36:fb:87:ea:cb:e2:54:42:01:8e:f0:9c:f7:30:43:40:7d

Fingerprint (sha1): a0:7d:6e:7b:67:ce:0d:e3:d1:88:a3:66:55:6e:50:08:28:86:63:49
Fingerprint (sha256): 01:7f:e3:f5:01:53:03:4c:e4:ea:79:5c:9c:61:d9:24:97:db:26:a2:6e:fb:26:bb:37:03:e9:2b:03:14:1e:2f

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009.cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009.crl

Check the revocation status for certificate vsdm-as-stage.vodafone.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vsdm-as-stage.vodafone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name vodafone.com

(limited to 100 certificates)
hr.evo.vodafone.com
idm.vodafone.com
asbc41.ims.spe02.vodafone.com
mssit.developer.vodafone.com
vge-mktg-secure.vodafone.com
www.vodafone.com
firebaseapp.com
srm-stage.vodafone.com
firebaseapp.com
vfeact.vodafone.test.vf-pt.internal.vodafone.com
ppoutlook-north.vodafone.com
gned-preprod.jira.agile.vodafone.com
preprod.mobile.securenet.vodafone.com
vogeportal.vodafone.com
vdslabs.vodafone.com
vfg-citrix-ext.vodafone.com
vgrm88hr.dc.sedc.internal.vodafone.com
egw1.vodafone.com
mytst.vodafone.test.vf-pt.internal.vodafone.com
firebaseapp.com
vfcmsload.vodafone.com
skype.internal.vodafone.com
degudent-vsp.vodafone.com
scorecard.evo.vodafone.com
ciscosdwan-stg.vodafone.com
asbc95.ims.spe02.vodafone.com
preprodapi.leap.vodafone.com
admin.footfall-sit.vodafone.com
vgddp538hr.dc.sedc.internal.vodafone.com
avospi01w.internal.vodafone.com
mft.vodafone.com
mgmt-zone.spe02.vodafone.com
wctfevip.webchat.vodafone.com
vADC243_Telco_CRM_WEB.internal.vodafone.com
vfghcatumfl1p.internal.vodafone.com
testreqpro.internal.vodafone.com
dm-uat-sentry.vodafone.com
WCPPC1X.webchat.vodafone.com
vmrdemo.vodafone.com
gaservice.prdrt.esb.vodafone.com
firebaseapp.com
xone.vodafone.com
www.connectedcomms.vodafone.com
org.tst.al.vmt.vodafone.com
blueprint-test.sp.vodafone.com
mail06.vodafone.com
corporate-federation.vodafone.com
IENTA1VW.vf-ie.internal.vodafone.com
iedocbvr.admnet.vodafone.com
srm.vodafone.com
itd.askonlineuk.vodafone.com
m2mprdgui.vodafone.com
itsm81.vodafone.com
externaltube.vodafone.com
dublin.oneview.vodafone.com
heineken-atlas.vodafone.com
ace-test.internal.vodafone.com
api-dub.developer.vodafone.com
firebaseapp.com
csg-live-covid-neuron.bdp.vodafone.com
ns1.dc-uk.vodafone.com
wcs.pre.eol.vodafone.com
nexus.r3ms2.k8s.eu-central-1.aws.cps.vodafone.com
splunk-dep.internal.vodafone.com
staging.addressbook.vodafone.com
sobe-pp.vodafone.com
gateway.d.evo.vodafone.com
cap2.cw.com
wellbeing.vodafone.com
swift-uat2.vodafone.com
skype-covid.internal.vodafone.com
ppprn01vw.ppinternal.vodafone.com
vfuk-enterprise-citrix-ext.vodafone.com
mdm.vodafone.co.uk
www.my-rewards.co.uk
business.vodafone.com
derat2is03.mono-zone.spe02.vodafone.com
jira-preprod.sp.vodafone.com
vsdm-as-stage.vodafone.com
m-ava-ld-web1.magic.vodafone.com
au.partnersappm.vodafone.com
m-gic-ld-web2.magic.vodafone.com
ssp.vodafone.com
test.analytics.vodafone.com
itcra.vodafone.com
*.eightfold.ai
firebaseapp.com
smartautoweb.smartlife.vodafone.com
contentdev.askonlinegrp2.vodafone.com
imperva.com
localitd.askonlinede.vodafone.com
firebaseapp.com
prod.proton.start.vodafone.com
uctoolkit.vodafone.com
securesim.vodafone.com
pcztest-citrix-maint.ppinternal.vodafone.com
webhostr2-01.pre.ciam.sp.vodafone.com
www.my-rewards.co.uk
firebaseapp.com
nql.vodafone.com

Certificate

The complete raw certificate details for vsdm-as-stage.vodafone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66Y9fRz1hfSlC4XRuuMN
z8OCimsokMdHrV3urnZPk//AQaagDGpGTCP49c9ow+m9omvcW7CQABFsFV/3OSCK
bBTMzwe8VdTFe5Kd4fm4MPlFpp8MgUuiodzILJyFaBM1Vb8K48jub7yWAqyRiIFk
ELOXBXTfJwiwzSHrO+UBnQrnTASuk4huUqysishLrDrvDDJ04vZmxxBwA+7MN2Zd
PeVUGyVroP3ePcBhhZdt9argRNsN5sQtRn5UimF09nzhOX/YQB1Wxv+1l17fxUwD
uWJjOOCxUvtOMyYHt1D6Kupqabp0M6ruYcE91icXSvmdiQIM9HQbc29FRisRALaC
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653788877684316042834077919326590939099600321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-28 14:48:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-28 14:48:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ratingen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EWA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vsdm-as-stage.vodafone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29747977760163731964323136536998271969142600789115740361399607559163605007234381081190516577442142385046989818572340755794111976817663510760739823374725466283964474876246244495050843582617156973617230460967079317335028210702852573788560515668359492915767492514411286843907525322879747245985604039840210715146335908281709824396803088792557495351350675162894238022475132296803085931219996659756134667661697267870805328435294990984003990007644243879179794594885996098851320102677757600848046785530947147691793188608921521387078244813869666161276021432681081926575017655257236969422940753433517976374122507387273177629207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98100c23134f60d267d1fdce304f60ebe2f5e4ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6833ac36fb87eacbe25442018ef09cf73043407d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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