vattnet.vattenfall.com

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 24:f8:13:37:da:8d:5f:ff:ca:a6:44:22 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vattnet.vattenfall.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 24:f8:13:37:da:8d:5f:ff:ca:a6:44:22
Serial Number (int): 11441364712115298110909334562
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: fb:a9:e7:af:97:e1:06:4a:12:2d:bf:4d:8c:24:f3:fb:cd:df:da:2d
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 51:76:f6:c5:fa:ed:c9:ef:66:d4:b0:be:95:3d:dd:b8:8f:c9:e7:5e
Fingerprint (sha256): 05:89:80:6b:21:34:6c:ad:eb:13:d6:7f:05:35:d2:b2:a2:9a:67:4c:b1:01:29:76:cf:c9:94:d6:97:2c:00:e4

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate vattnet.vattenfall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vattnet.vattenfall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vattnet.vattenfall.com

Other certificates including the domain name vattenfall.com

(limited to 100 certificates)
corporate.vattenfall.com
wpmysite.vattenfall.com
mx.vattenfall.com
wifi-guest2.vattenfall.com
emobility-cloud-tst.vattenfall.com
brandtoolbox.vattenfall.com
accounts-tst.vattenfall.com
devinspectiontoolupload.vattenfall.com
demoenergysite.vattenfall.com
ssl418473.cloudflaressl.com
windapi.vattenfall.com
llp.vattenfall.com
incharge.vattenfall.com
matillion-tst.vattenfall.com
flexibility-services.vattenfall.com
corporate.vattenfall.com
sustainablecities.vattenfall.com
video-production-hub.vattenfall.com
futurestreet-devtst.vattenfall.com
market.vattenfall.com
jupiter.vattenfall.com
windapiportal.vattenfall.com
vattnet.vattenfall.com
brandtoolbox.vattenfall.com
powerplants.vattenfall.com
autodiscover.vattenfall.com
aditrosapfi.vattenfall.com
*.vtsgslb.vattenfall.com
windtech.vattenfall.com
innovation-portal.vattenfall.com
mg.vattenfall.com
elektrischvervoer.vattenfall.com
comtoolbox-internal.vattenfall.com
sni.cloudflaressl.com
ssl418475.cloudflaressl.com
accounts-acc.vattenfall.com
ssl418475.cloudflaressl.com
mijnev.vattenfall.com
sms.vattenfall.com
cep-api-acc.vattenfall.com
neptunedev.vattenfall.com
intranetjobs.vattenfall.com
NPG-prd.vattenfall.com
accounts-tst.vattenfall.com
cep-api-dev.vattenfall.com
fs-t.vattenfall.com
powerplants.vattenfall.com
techit-ccc.vattenfall.com
acc.api.vattenfall.com
statistics.vattenfall.com
flexibility-services-demo.vattenfall.com
emobility-cloud-dev.vattenfall.com
powerplants.vattenfall.com
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
sbcde01.vattenfall.com
fs.vattenfall.com
nta.vattenfall.com
emobility-cloud-tst.vattenfall.com
vea.vattenfall.com
mbstaging.vattenfall.com
inchargemaacc.vattenfall.com
jobprofiles.vattenfall.com
search.unce.achilles.com
nseniac.vattenfall.com
vfrelay.vattenfall.com
networksolutionsma.vattenfall.com
mobileintranet.vattenfall.com
sys.api.vattenfall.com
devwindapiportal.vattenfall.com
fs-t.vattenfall.com
accounts.vattenfall.com
vea.vattenfall.com
retro.vattenfall.com
accounts-tst.vattenfall.com
sni.cloudflaressl.com
as4.markets.vattenfall.com
sip.skbdev.vattenfall.com
powerplants.vattenfall.com
*.vtsgslb.vattenfall.com
intranetjobs.vattenfall.com
vea-a.vattenfall.com
flexibility-services-tst.vattenfall.com
elektrischvervoer.vattenfall.com
arm-acc.vattenfall.com
ssl418473.cloudflaressl.com
tasper-dev.vattenfall.com
Kiss-acc.vattenfall.com
vtssms.vattenfall.com
techit-sms.vattenfall.com
welcome.vattenfall.com
emob-csc.vattenfall.com
accprd.vattenfall.com
kiss-acc.vattenfall.com
networksolutionsma.vattenfall.com
accounts-acc.vattenfall.com
acc-dprwebform.vattenfall.com
as2.acc.markets.vattenfall.com
dpr.vattenfall.com
acc-dprwebform.vattenfall.com

Certificate

The complete raw certificate details for vattnet.vattenfall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD9dY+vitq0+vtUgf/ZS
GGibKEhdzZh5hHQ0Vnv6+87KpwV5KBsaj7CucquTmgB3i5KUin9GBYSFMHjx1WrA
FcedfrWUGl9MbEy/IR3AGwHCcTeCK2GHk/f7lBDuet7XWquZbwc1NUFn+j6onYnD
jzUNlu8C4+I0XqqVDc25hHXWuYwETb0X3TOHzOz8+g4RUozy/tuati0eDpL152V9
H1DOiIlFWbZwSphJt9TpPsG85D39lCwBqXHZUw5Giq2SXqYmxKknl976VezTk6pF
AzZk26qvkbuj2keZyonVpps0dq5tzxM6bX5pM0ccVKBqJvBW/7Y+2D//Y7XMbtBN
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11441364712115298110909334562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 12:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 12:07:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vattnet.vattenfall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22754141244262058943715129508838045440124074097468665264298621234480176354862329002815046727843679184270489668732544364420740203882222452027972610087838815966432342344863536635735683197646530215851438605046161361680510416207854516872887136958967577153754077523982485591001405865999802597936095954907106020977427934039830355268269932975958982147371810999702042968511450797105498364764777108996667132169196849452165024492841935112796644250914348009039623351097182375318199518202027523515991324916425959685057626535679997245921536572697275728302180789136037958916978211507119454208293032419022940226753195224820754697691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vattnet.vattenfall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fba9e7af97e1064a122dbf4d8c24f3fbcddfda2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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