chefdml.rwe.com

- RWE AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3b:6d:51:87:50:0d:cb:88:fa:5c:59:cc was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RWE AG

Organization: RWE AG
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:6d:51:87:50:0d:cb:88:fa:5c:59:cc
Serial Number (int): 18391773501561406513764653516
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 74:e8:40:97:a4:9b:d6:ea:b9:b6:0f:c3:c1:f0:66:86:e5:d9:cb:a7
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): bb:15:d4:5c:24:39:65:8f:99:c5:d2:66:37:ce:c0:c8:f8:09:3f:55
Fingerprint (sha256): 06:4a:21:fb:96:71:f4:17:10:87:8f:fc:92:11:d8:4b:08:38:05:18:84:6a:df:c2:e9:93:e4:6e:be:f5:d8:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate chefdml.rwe.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chefdml.rwe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chefdml.rwe.com

Other certificates including the domain name rwe.com

(limited to 100 certificates)
virtuadesktest.rwe.com
sentinel.rwe.com
www.hr-fb.rwe.com
rwestra.rwe.com
gis.rwe.com
news.rwe.com
lyncweb.rwe.com
group.rwe
autodiscover.rwe.com
supplierqs.rwe.com
supplierdev.innogy.com
vdi2.stpa.rwe.com
www.rwe.com
wlanguestaccess.rwe.com
easkkw.rwe.com
autodiscover.rwe.com
virtuadesk.rwe.com
b2edev.innogy.com
a-mdmsentry.rwe.com
www.rwe.com
chefdml.rwe.com
supplierdev.innogy.com
sodra-midsjobanken.rwe.com
lyncweb.rwe.com
medaco.rwe.com
crs.rwe.com
rwestguestaccess.rwe.com
fdl.rwe.com
sentinel.rwe.com
gastro.rwe.com
mx1.rwe.com
proper.rwe.com
b2edev.innogy.com
americas.rwe.com
csab.rwe.com
osuc-mobile.rwe.com
v99-exp01p-ext.rwe.com
rweg-uk-dedcwvsr-uc902.rwe.com
mail.rwe.com
webmarket.rwe.com
themis.rwe.com
info-securelogin.rwe.com
gateway.stpa.rwe.com
pfm.rwe.com
teamwork.rwe.com
cage-d-pdn.rwe.com
maintenance.rwe.com
gbg.rwe.com
mars.rwe.com
virtuadesk.rwe.com
smartpool-portal.rwe.com
sip.innogy.com
prod.nexus.aws-eu1.rwe.com
proper.rwe.com
rsdr.rwe.com
virtuadesk.rwe.com
jira.tgb.rwe.com
wg003045.rwe.com
mx4.rwe.com
testconnect.rwe.com
survey.rwe.com
webmarket.innogy.com
gateway1.stpa.rwe.com
b2e.innogy.com
pod.rwe.com
secmail.rwe.com
crstest.rwe.com
maintenance.rwe.com
gis.rwe.com
portal.gasstorage-west.rwe.com
info-mdm.rwe.com
properbackendnonprod.rwe.com
a-mdmcore.rwe.com
rga.rwe.com
view.rwe.com
lyncweb.rwe.com
hportal.rwe.com
mail.rwe.com
vmgmail25.rwe.com
hportal.rwe.com
connect.rwe.com
essmobile.rwe.com
ukrga.rwenpower.com
info-securelogin.rwe.com
lyncweb.rwe.com
info-isp.rwe.com
login.rwe.com
mars.rwe.com
druckcockpit.rwe.com
gfh-portal.rwe.com
access02.rwe.com
rdsgw.tgb.rwe.com
sup.rwe.com
bitbucket.rwe.com
inubit-test.rwe.com
acc-login.rwe.com
ecoflex.rwe.com
esourcing.rwe.com
epos-marktplatz.rwe.com
bee360.rwe.com

Certificate

The complete raw certificate details for chefdml.rwe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiOwdjlLIj8tu0piD+3B
6Vszn5RMD5XkTASKTLBaK7o/gmSZReIUygWYezkbjg2Af/R2ZCvGqCNgLD0pRX/J
hsGem3/AbbK47T+Fai/0QlV6OrN54oV2TQ+O88V1BGLwRL6QDMZjtyQFRFCi/jDB
zw2LlkXxkxRybLOqCKwEBDPSoAiqNpz8l1PG5xaxRc2iRXvwXkh47iB+Fd4NJVEy
Mz0HCv4eRuvqpuPs0/Mubqmv0vCHWYBxTfVMs6pLVGUV+W6Adv4KILOpUsyPj57n
aqJRcILK8xzlbQ89iMN1KCHp7R6sOOi0dOYweO1hYApl4AjvgcFYfFNgioMxfxqg
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18391773501561406513764653516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 13:59:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 13:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWE AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chefdml.rwe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25012783434984011379000582321868314196321755706845252137592407268754649720971791241791437844983512623377718653277702231427908677523749763826699723631050213035009264274760139232757099863269369191550798994964854615130068605304540131921316918759566303097226532335938329849985616692329197947047173529193263307449760076229821937234568320495529852054670062302568936578301660306225357134309573073919832660811990517233884098807801998433274340083664362797164680832539503071420020790525482787353971366696727277486440045048300930315314224587939537268218179985175400299380374504513227330588899220132815920335369064202531380043967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefdml.rwe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74e84097a49bd6eab9b60fc3c1f06686e5d9cba7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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