*.app.vaillant.com

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 17:2f:ab:b4:ba:a4:0e:b5:49:41:ad:90 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.app.vaillant.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:2f:ab:b4:ba:a4:0e:b5:49:41:ad:90
Serial Number (int): 7175785597944218687948041616
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e0:21:56:e9:48:06:e1:a5:f3:0b:34:a1:47:c9:88:c9:0b:f5:db:93
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 75:6d:b8:bd:97:a0:d4:36:48:eb:b6:c6:b8:bd:6a:ef:66:a3:eb:54
Fingerprint (sha256): 12:d9:2a:b4:37:45:06:09:d6:24:11:27:25:15:fe:2f:b5:e1:89:58:61:27:0f:ab:d9:5b:ba:c1:5b:af:4f:8a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.app.vaillant.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app.vaillant.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app.vaillant.com
app.vaillant.com

Other certificates including the domain name vaillant.com

(limited to 100 certificates)
sip.eb-com.com
pool04.eb-com.com
quick-tools.app
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
sync.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
*.app.vaillant.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.lt
www.vaillant.com
*.vaillant.com
sip.eb-com.com
www.vaillant-group.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
www.vaillant.lt
vodras.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
smart.vaillant.com
smart.vaillant.com
pool04.eb-com.com
auropower.vaillant.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
*.vaillant.com
auropower.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
www.vaillant.de
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
www.vaillant.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
www.vaillant.com
www.vaillant.com
elopack.vaillant.com
pool04.eb-com.com
www.vaillant.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
*.app.vaillant.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
www.vaillant.com
*.vaillant.com
*.vaillant.com
*.app.vaillant.com
sync.vaillant-group.com
sip.eb-com.com
pool04.eb-com.com
www.vaillant.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
pool04.eb-com.com
pool04.eb-com.com
*.app.vaillant.com
sip.eb-com.com
auropower.vaillant.com
sync.vaillant-group.com
pool04.eb-com.com
auropower.vaillant.com
www.vaillant-group.com
sip.eb-com.com
sip.eb-com.com

Certificate

The complete raw certificate details for *.app.vaillant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7175785597944218687948041616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 14:52:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-18 14:52:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app.vaillant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652363653795695537808760572791944763418392002051490485638462878845145222177418545476104830272104874048320545981460603765077620713584626857228957040069605216747660013349999526139239801940230702959568200647721100041897953322273633529834677024547000503939236383252652330250711380947309810920812266665684174368828467937137919900425290613528126547036269882574345124395498007199834234991217226651904430675900019961352688186460677733020794789507132559173025260371659699393988865634119781245316576173205166196543168871628366086221639960222808803168069971722323603749222295768321493707998273895576499844743142991109156495435869985949186884823045556611194537543692386371464187850653435339733338789177432468212597105307135196795898029812870676730804296749136217198972657798818283228314705590205307785294186114055580538746758409959948420611083796984719004408382594637178204099484691658543030715482647108008828794480609029030683082144515038140788444269565031965556284771144604227646272323006847026678109565026588881892166752465666639125534212907666589674162970555430148898309340883889703509617978388994074141898924357789010226518353940794004771398191870555565336678799671066463629773179764943285813547433671639003469803957780813630530326127225891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.vaillant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vaillant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e02156e94806e1a5f30b34a147c988c90bf5db93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063f81991ff771e9da6a68f9550c55ec79f9e3548b20c9e438ee2194450833c1f6e82cf5cd734fa13afe2adafcbddf99f7b046a60b0722e1b815089cfae052905cc5b2c80f3cef561132d67a57b2c8257e2aab72c7d45406e9a0d6fb718ad7f7dc5e30780bc28dfb393a8b1ac9cae8e90de861610b9861ab6c33d8120d5667bd13eb4da628ac9d69e45e1d142b13f7544b367eb6e9afd3b91d075f8812b4a0b51a3321f6a5e742f737db634b66e99e6e6a6dc5ae0c71078a3c7e0bdabd960e2827c0f91ba519064f4af1c776ea65dec94857525b3eac7cb64b624c05c4e7fe2aaf2b8827ce34ce464f9e805119bda8596b87ed7154b10bd4759f692df608d33b0