sodra-midsjobanken.rwe.com

- RWE AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 01:3a:35:f9:41:ea:1b:7f:09:b0:66:e9 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

RWE AG

Organization: RWE AG
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:3a:35:f9:41:ea:1b:7f:09:b0:66:e9
Serial Number (int): 379857590771498995185379049
Serial Number lenght: 89 bits, 12 octets

SubjectKeyId: d8:ea:00:37:a1:a7:4b:ea:f4:1a:49:cd:7a:de:b7:58:cc:63:46:39
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 5c:32:83:ca:43:cf:ed:87:b1:14:9f:6c:97:bf:f5:4d:8d:6e:05:4b
Fingerprint (sha256): 06:e2:d4:11:59:bf:a8:ea:e2:be:00:30:60:85:4e:3b:92:17:e0:bc:02:0f:69:4a:d2:43:f4:46:65:62:a6:a7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate sodra-midsjobanken.rwe.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sodra-midsjobanken.rwe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sodra-midsjobanken.rwe.com

Other certificates including the domain name rwe.com

(limited to 100 certificates)
virtuadesktest.rwe.com
sentinel.rwe.com
www.hr-fb.rwe.com
rwestra.rwe.com
gis.rwe.com
news.rwe.com
lyncweb.rwe.com
group.rwe
autodiscover.rwe.com
supplierqs.rwe.com
supplierdev.innogy.com
vdi2.stpa.rwe.com
www.rwe.com
wlanguestaccess.rwe.com
easkkw.rwe.com
autodiscover.rwe.com
virtuadesk.rwe.com
b2edev.innogy.com
a-mdmsentry.rwe.com
www.rwe.com
chefdml.rwe.com
supplierdev.innogy.com
sodra-midsjobanken.rwe.com
lyncweb.rwe.com
medaco.rwe.com
crs.rwe.com
rwestguestaccess.rwe.com
fdl.rwe.com
sentinel.rwe.com
gastro.rwe.com
mx1.rwe.com
proper.rwe.com
b2edev.innogy.com
americas.rwe.com
csab.rwe.com
osuc-mobile.rwe.com
v99-exp01p-ext.rwe.com
rweg-uk-dedcwvsr-uc902.rwe.com
mail.rwe.com
webmarket.rwe.com
themis.rwe.com
info-securelogin.rwe.com
gateway.stpa.rwe.com
pfm.rwe.com
teamwork.rwe.com
cage-d-pdn.rwe.com
maintenance.rwe.com
gbg.rwe.com
mars.rwe.com
virtuadesk.rwe.com
smartpool-portal.rwe.com
sip.innogy.com
prod.nexus.aws-eu1.rwe.com
proper.rwe.com
rsdr.rwe.com
virtuadesk.rwe.com
jira.tgb.rwe.com
wg003045.rwe.com
mx4.rwe.com
testconnect.rwe.com
survey.rwe.com
webmarket.innogy.com
gateway1.stpa.rwe.com
b2e.innogy.com
pod.rwe.com
secmail.rwe.com
crstest.rwe.com
maintenance.rwe.com
gis.rwe.com
portal.gasstorage-west.rwe.com
info-mdm.rwe.com
properbackendnonprod.rwe.com
a-mdmcore.rwe.com
rga.rwe.com
view.rwe.com
lyncweb.rwe.com
hportal.rwe.com
mail.rwe.com
vmgmail25.rwe.com
hportal.rwe.com
connect.rwe.com
essmobile.rwe.com
ukrga.rwenpower.com
info-securelogin.rwe.com
lyncweb.rwe.com
info-isp.rwe.com
login.rwe.com
mars.rwe.com
druckcockpit.rwe.com
gfh-portal.rwe.com
access02.rwe.com
rdsgw.tgb.rwe.com
sup.rwe.com
bitbucket.rwe.com
inubit-test.rwe.com
acc-login.rwe.com
ecoflex.rwe.com
esourcing.rwe.com
epos-marktplatz.rwe.com
bee360.rwe.com

Certificate

The complete raw certificate details for sodra-midsjobanken.rwe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm+e6+Jps2Mr7RPON5JN
fXrHnK9rJcz9aGGdMYe43k0JzNLdo5wfmSGjPNNPFa9ipv+8LoFJqCH6HpBXLFXu
uQjZpopmTO9uFF2d4+x9g9HOg02ojcoxyyeRYOrfCU9N3/dQ9sLKU2y0+qviGHBg
j+nQj26ihKb7v2euQRF/xxdmooQHjnAxP9A7lrEBBHTGcSIXZ8uPRge66c95AZD2
sZKt5TH6ukDx07Tx3PBdt15zAVE6PpXXvKiyfE5LQlZrCylheoIcyHRM39QVRp1r
XntLP9orYGNKH8ACbRu9tqBGNg1nRbAoFKrMwvgZFCdKXwuZP15YI/hbO5dF+Iyi
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379857590771498995185379049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 08:11:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 08:11:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWE AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sodra-midsjobanken.rwe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22020507325523728672910530483938365957751953644261170860274955009844021775084625753200656248287397175688196943909592424477244266112626527150260073057209606867601562273382489144426463073886840364882170855251655091758664010213499100813326161833516763165214423391293554975209591470505931997997018351157368677851184367245214418249437007315563152000780599816011005080657620166045973441844223908486885634718815371355067093521578043640871295676501246470753963261743101960722454439630178989767746549814983589360863507082065023428805508832185808636280964315097603582369416108247159739247473546160283229410021018986303237956119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodra-midsjobanken.rwe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8ea0037a1a74beaf41a49cd7adeb758cc634639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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