cgs.card.evry.com

- EVRY Card Services AB -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:41:1c:d0:b2:2a:1e:97:a1:b4:f8:a5:c5:f6:88:e3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

EVRY Card Services AB

Organization: EVRY Card Services AB
Organization unit: P&O
Locality: Solna
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:41:1c:d0:b2:2a:1e:97:a1:b4:f8:a5:c5:f6:88:e3
Serial Number (int): 9642679708365131220663511068175665379
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0d:33:4b:74:83:c8:1b:da:d3:bb:ef:06:50:17:ac:11:eb:f7:06:98
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6c:a2:59:63:9e:a3:d8:c9:3f:d7:1e:0d:a2:bd:1c:00:5b:ac:e4:68
Fingerprint (sha256): 0c:ea:76:bd:c1:c6:b0:3b:a6:c9:46:50:9d:67:70:a9:de:31:8a:57:4f:c4:5e:02:11:15:9a:d8:7d:33:0e:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate cgs.card.evry.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgs.card.evry.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cgs.card.evry.com

Other certificates including the domain name evry.com

(limited to 100 certificates)
qp05.swift.servicebureau.evry.com
kundeportal.evry.com
docportal.evry.com
leapfrog-ssl-6.gcs-web.com
earkivod.evry.com
fsjenkins-restricted.evry.com
arweb.evry.com
leapfrog-ssl-6.gcs-web.com
3d.cekab.net
north.card.evry.com
w15pool01.corp.corpcommon.com
zonoscp.evry.com
sip.evry.com
*.serviceportal.evry.com
nettbedriften.evry.com
psp.card.evry.com
wiki.svg.evry.com
oneportal.evry.com
da.card.evry.com
*.easi.evry.com
portal.card.evry.com
cgs.card.evry.com
vpn.evry.com
*.services.evry.com
*.eo.evry.com
mail.evry.com
cognitive.evry.com
leapfrog-ssl-6.gcs-web.com
cgs.card.evry.com
customerportal.fscustomertest.evry.com
epin.cardservices.evry.com
academy.evry.com
sni.cloudflaressl.com
leapfrog-ssl-6.gcs-web.com
*.mobility.evry.com
sni.cloudflaressl.com
cgs.cert.card.evry.com
view.evry.com
view.evry.com
openbanking.evry.com
leapfrog-ssl-6.gcs-web.com
qa.fms.evry.com
telmax.evry.com
mqsh.evry.com
secure.evry.com
*.ro-services.evry.com
view.evry.com
karantene.evry.com
sip.evry.com
samgw.evry.com
lekdommer.evry.com
lekdommer.evry.com
leapfrog-ssl-6.gcs-web.com
*.svg.evry.com
leapfrog-ssl-6.gcs-web.com
sip.evry.com
dnb.sfms.evry.com
evry.com
sso.fms.evry.com
epin.cardservices.evry.com
leapfrog-ssl-6.gcs-web.com
telenorvalue.west.evry.com
sip.corpcommon.com
archiveeika.evry.com
prtg.evry.com
telenorvalue.west.evry.com
webshop.boras.evry.com
kundeportal.evry.com
south.card.evry.com
portal.card.evry.com
terraearkivqa.evry.com
guru.evry.com
vpn.evry.com
sni.cloudflaressl.com
netstat.evry.com
sip.evry.com
mqemq02p.evry.com
telenorvalue.west.evry.com
cgs.card.evry.com
*.tietoevry.com
earkiv.evry.com
da.card.evry.com
elearning.evry.com
*.sa.evry.com
*.svg.evry.com
kundeportal.evry.com
was.evry.com
driftinfo.boras.evry.com
leapfrog-ssl-6.gcs-web.com
samb.evry.com
leapfrog-ssl-6.gcs-web.com
vpn.evry.com
wiki.svg.evry.com
*.evry.com
annualreport.evry.com
annualreport.evry.com
portal.card.evry.com
shop.evry.com
telenorvalue.west.evry.com
cgs.card.evry.com

Certificate

The complete raw certificate details for cgs.card.evry.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9642679708365131220663511068175665379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Solna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EVRY Card Services AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'P&O'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgs.card.evry.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733923156571046338289871687209615373605500555791846126158031696553041078524556940139271820931605892420496165558969919290444431455570353236196826930388601777524814279442379483318428171507107999229964588913797914487366775813274041101093831446564254930548144197064776388317775969555194488992719677652853189631180086644879874903577955011903774440517798150676257881765693531511914562283702787883083832153136169680898417711153903731512117721316467869429695825009092412439599039315313724250176463801942545148139444245916219891455440808536566337385378602599449584537043304278624214136047318326653963594140060109636659524422055578722786729679087220378804781482547250638618013822457337352701993154932036964532310348525571314169847502309295823279741061667800222503027773396027415886831947120408391423203314616123437159973900712366144676497414131395217227340054802229044166910329100832574821253927057044425544886814800985755348919709365745362883719951226242481731402045593328186707335211770524058805108295163753468745106121874811323970328284392689689464549932924737301801501349579510138803335874908268556517580400690356672410420495008308310866395910464470105726361095022013117245827851261523337724120303507653404526608947226716527792548264827617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d334b7483c81bdad3bbef065017ac11ebf70698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgs.card.evry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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