sms.vattenfall.com

Issued by Buypass Class 2 CA 5

About this certificate

This digital certificate with serial number 01:fa:8f:1b:8c:22:d9:c3:d3:b5:ce was issued on by Buypass AS-983163327.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sms.vattenfall.com

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate has expire since

Certificate Details

Serial Number (hex): 01:fa:8f:1b:8c:22:d9:c3:d3:b5:ce
Serial Number (int): 2392157309734435396236750
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: 16:2d:88:8e:94:83:12:65:17:1a:32:15:36:53:9a:f0:d4:9b:70:9d
AuthorityKeyId: 27:52:a4:6f:2d:2a:ab:40:93:90:ec:d6:69:cb:fe:7c:61:3b:7c:42

Fingerprint (sha1): 00:a3:11:9e:03:d5:72:70:1c:f7:b7:63:66:56:79:c9:fc:42:e6:8d
Fingerprint (sha256): 08:17:16:fc:26:71:71:54:35:50:dc:53:0c:83:90:d7:32:94:99:6a:2d:fc:88:b9:64:35:55:53:29:0d:92:cf

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA5.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA5.crl

Check the revocation status for certificate sms.vattenfall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sms.vattenfall.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sms.vattenfall.com

Other certificates including the domain name vattenfall.com

(limited to 100 certificates)
corporate.vattenfall.com
wpmysite.vattenfall.com
mx.vattenfall.com
wifi-guest2.vattenfall.com
emobility-cloud-tst.vattenfall.com
brandtoolbox.vattenfall.com
accounts-tst.vattenfall.com
devinspectiontoolupload.vattenfall.com
demoenergysite.vattenfall.com
ssl418473.cloudflaressl.com
windapi.vattenfall.com
llp.vattenfall.com
incharge.vattenfall.com
matillion-tst.vattenfall.com
flexibility-services.vattenfall.com
corporate.vattenfall.com
sustainablecities.vattenfall.com
video-production-hub.vattenfall.com
futurestreet-devtst.vattenfall.com
market.vattenfall.com
jupiter.vattenfall.com
windapiportal.vattenfall.com
vattnet.vattenfall.com
brandtoolbox.vattenfall.com
powerplants.vattenfall.com
autodiscover.vattenfall.com
aditrosapfi.vattenfall.com
*.vtsgslb.vattenfall.com
windtech.vattenfall.com
innovation-portal.vattenfall.com
mg.vattenfall.com
elektrischvervoer.vattenfall.com
comtoolbox-internal.vattenfall.com
sni.cloudflaressl.com
ssl418475.cloudflaressl.com
accounts-acc.vattenfall.com
ssl418475.cloudflaressl.com
mijnev.vattenfall.com
sms.vattenfall.com
cep-api-acc.vattenfall.com
neptunedev.vattenfall.com
intranetjobs.vattenfall.com
NPG-prd.vattenfall.com
accounts-tst.vattenfall.com
cep-api-dev.vattenfall.com
fs-t.vattenfall.com
powerplants.vattenfall.com
techit-ccc.vattenfall.com
acc.api.vattenfall.com
statistics.vattenfall.com
flexibility-services-demo.vattenfall.com
emobility-cloud-dev.vattenfall.com
powerplants.vattenfall.com
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
sbcde01.vattenfall.com
fs.vattenfall.com
nta.vattenfall.com
emobility-cloud-tst.vattenfall.com
vea.vattenfall.com
mbstaging.vattenfall.com
inchargemaacc.vattenfall.com
jobprofiles.vattenfall.com
search.unce.achilles.com
nseniac.vattenfall.com
vfrelay.vattenfall.com
networksolutionsma.vattenfall.com
mobileintranet.vattenfall.com
sys.api.vattenfall.com
devwindapiportal.vattenfall.com
fs-t.vattenfall.com
accounts.vattenfall.com
vea.vattenfall.com
retro.vattenfall.com
accounts-tst.vattenfall.com
sni.cloudflaressl.com
as4.markets.vattenfall.com
sip.skbdev.vattenfall.com
powerplants.vattenfall.com
*.vtsgslb.vattenfall.com
intranetjobs.vattenfall.com
vea-a.vattenfall.com
flexibility-services-tst.vattenfall.com
elektrischvervoer.vattenfall.com
arm-acc.vattenfall.com
ssl418473.cloudflaressl.com
tasper-dev.vattenfall.com
Kiss-acc.vattenfall.com
vtssms.vattenfall.com
techit-sms.vattenfall.com
welcome.vattenfall.com
emob-csc.vattenfall.com
accprd.vattenfall.com
kiss-acc.vattenfall.com
networksolutionsma.vattenfall.com
accounts-acc.vattenfall.com
acc-dprwebform.vattenfall.com
as2.acc.markets.vattenfall.com
dpr.vattenfall.com
acc-dprwebform.vattenfall.com

Certificate

The complete raw certificate details for sms.vattenfall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2392157309734435396236750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-31 08:00:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-29 21:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sms.vattenfall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4090133367466614612663661256329326278988286299604251910522069898979720307273099393727168215912285006529070472385154502652567641418306640131337300143965751265635306388388116937918474662752779076551977848559813100035347362377935648780335670072915230672334367386653358826331242431229518139945141288904509516503978531888967708010967276154283399512612583606256500138102238094985410573169010534643978473644416234470077184467287991067114340724501885135127459257023371175741022046775479182525274403973957012135454217590935162101155866203936241063004076644603707665105741297751307108304072461082924701490347471948271494078635029976112748460778226610541581857376144100843944524393835515585256722733003574170902663027014289846074228366279703178746961555367446757948825992464790714981395468503660616566053138339464263241765224371028857895158381556479001219939397291471622327009833088580120957193608602197402684333434559632977922762488589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2752a46f2d2aab409390ecd669cbfe7c613b7c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							162d888e94831265171a321536539af0d49b709d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.vattenfall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017eaf26ad000000040300473045022100c957ef34879a0e9d8bb32bbf0fab9becb869ca693411a4199b23a32c60bd680a02204ad981cf0c3627e0fe2755af930a9271dd8d541ceb233ce8601f38434af7426200760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017eaf26ad14000004030047304502206d8bdb11b386f4bdbb537475c3eacc9dc93caf6d769da15df0cd7b5d1ba6a2a6022100b74401804ab63561762d58f702f8628ea6ed72cac62bcab4a6e589d14aad5048
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009cf6a050937e4d8118e06133af481101c42b96e85a98b91f157622c78ee849b012ef263cd90ddeaa05aed86ae408392c239f6b0d0b3144cdb01cb66e847d7c61e21ae2d907f77cf7b5af542eeb1609cfcdce4e1ac4a94a290d26dfda6c51b902fddbab5e5222feed6c45bef9e817164489a9d56ae98d7179a8692667e2c456dc7c3a491b2ebcb94157e6b5225b4a9f464914b71978616afe3fc2104203d29b3e8e8fedad7cced242d5b510d53896bfc34cade57a48d9457c14d59d55c4fb317a8bdbcbf25eea5aacd9f8806a71642a8f8afdeeffdeefc13052105de6c4b36933389cd13ff2bbaec700f5ad63d8c08d9396e5119142426489707fe8c451a4da09c209bf604fa5cd0adeb72f937c512b5d59b82240241ccabba9b6acb9c47a132fd54617c34163ce861f78cfa66f5f0b47de10cb9f83ca547e97d29b058874a26171bec350112696fb1ec5a4758e7952a53f47ff0493de3f29ee131519538868c4e59c21ffebe631dafbc6c2cf85e88d1314f3493708505502384d0619808b16380ce0d4f7c51d3fd7da9ab47f3d7b33ed93382e8862407c6b5779e43701de0d9753eb3a6cded1eb1e937430d1910fee85d7d3632cde6b31e680a8c9648e2a40efe1716d502831b1df0880339bd7239516c0644fd282470498ca61171a2e554ec090db04c214b8f5fb75df938686952f0c83ce238139588d05fd9ad318e227cfd4