flexibility-services-tst.vattenfall.com

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 64:df:2f:06:f8:c3:a8:5f:b5:cf:8c:ee was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flexibility-services-tst.vattenfall.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 64:df:2f:06:f8:c3:a8:5f:b5:cf:8c:ee
Serial Number (int): 31218313519739084564910279918
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 06:f4:f0:2f:8a:7c:19:cf:5c:e9:72:8e:fc:f1:63:05:37:2c:f3:9a
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): a9:d6:1e:db:a0:8d:a7:9f:00:a1:2a:49:86:69:ec:d6:7c:c6:b6:2f
Fingerprint (sha256): 14:cc:aa:45:03:cf:c9:95:3a:fa:22:17:5d:50:25:2e:28:22:d5:e0:3d:ad:f0:9f:b2:14:82:67:9b:18:f9:57

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate flexibility-services-tst.vattenfall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flexibility-services-tst.vattenfall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flexibility-services-tst.vattenfall.com

Other certificates including the domain name vattenfall.com

(limited to 100 certificates)
corporate.vattenfall.com
wpmysite.vattenfall.com
mx.vattenfall.com
wifi-guest2.vattenfall.com
emobility-cloud-tst.vattenfall.com
brandtoolbox.vattenfall.com
accounts-tst.vattenfall.com
devinspectiontoolupload.vattenfall.com
demoenergysite.vattenfall.com
ssl418473.cloudflaressl.com
windapi.vattenfall.com
llp.vattenfall.com
incharge.vattenfall.com
matillion-tst.vattenfall.com
flexibility-services.vattenfall.com
corporate.vattenfall.com
sustainablecities.vattenfall.com
video-production-hub.vattenfall.com
futurestreet-devtst.vattenfall.com
market.vattenfall.com
jupiter.vattenfall.com
windapiportal.vattenfall.com
vattnet.vattenfall.com
brandtoolbox.vattenfall.com
powerplants.vattenfall.com
autodiscover.vattenfall.com
aditrosapfi.vattenfall.com
*.vtsgslb.vattenfall.com
windtech.vattenfall.com
innovation-portal.vattenfall.com
mg.vattenfall.com
elektrischvervoer.vattenfall.com
comtoolbox-internal.vattenfall.com
sni.cloudflaressl.com
ssl418475.cloudflaressl.com
accounts-acc.vattenfall.com
ssl418475.cloudflaressl.com
mijnev.vattenfall.com
sms.vattenfall.com
cep-api-acc.vattenfall.com
neptunedev.vattenfall.com
intranetjobs.vattenfall.com
NPG-prd.vattenfall.com
accounts-tst.vattenfall.com
cep-api-dev.vattenfall.com
fs-t.vattenfall.com
powerplants.vattenfall.com
techit-ccc.vattenfall.com
acc.api.vattenfall.com
statistics.vattenfall.com
flexibility-services-demo.vattenfall.com
emobility-cloud-dev.vattenfall.com
powerplants.vattenfall.com
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
sbcde01.vattenfall.com
fs.vattenfall.com
nta.vattenfall.com
emobility-cloud-tst.vattenfall.com
vea.vattenfall.com
mbstaging.vattenfall.com
inchargemaacc.vattenfall.com
jobprofiles.vattenfall.com
search.unce.achilles.com
nseniac.vattenfall.com
vfrelay.vattenfall.com
networksolutionsma.vattenfall.com
mobileintranet.vattenfall.com
sys.api.vattenfall.com
devwindapiportal.vattenfall.com
fs-t.vattenfall.com
accounts.vattenfall.com
vea.vattenfall.com
retro.vattenfall.com
accounts-tst.vattenfall.com
sni.cloudflaressl.com
as4.markets.vattenfall.com
sip.skbdev.vattenfall.com
powerplants.vattenfall.com
*.vtsgslb.vattenfall.com
intranetjobs.vattenfall.com
vea-a.vattenfall.com
flexibility-services-tst.vattenfall.com
elektrischvervoer.vattenfall.com
arm-acc.vattenfall.com
ssl418473.cloudflaressl.com
tasper-dev.vattenfall.com
Kiss-acc.vattenfall.com
vtssms.vattenfall.com
techit-sms.vattenfall.com
welcome.vattenfall.com
emob-csc.vattenfall.com
accprd.vattenfall.com
kiss-acc.vattenfall.com
networksolutionsma.vattenfall.com
accounts-acc.vattenfall.com
acc-dprwebform.vattenfall.com
as2.acc.markets.vattenfall.com
dpr.vattenfall.com
acc-dprwebform.vattenfall.com

Certificate

The complete raw certificate details for flexibility-services-tst.vattenfall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQFR5m+Ds+FTTZJA+amU
x2E/6ayaV1jtpjNtJV8b3km+oAuj+X6nuN/nmOKHnyU3+uAqvwErw8xKaJdvk7bR
tO2vdHliSPLdAq6xLeEIOi7VfWrHQxBVG8/hFB7zla3d2ISWX9byNiYIBMHQbMgV
F38jTs/s1s5IHOCRusfZUQgW8Q+jw+URmerBgugeW7eIrjnQ/4vhHoBahTJkVkhs
IAGnPukDZdJn4nx2RvsrujHI+JHHBVGrlhoulkIriv/CqGI17z+8oCr5rWiZUq2G
ZdD8waugA5dv49CvyHQjbjeXhslIETg/0zIF93MNMZUWxWe0r4EbEE8mssOSfU6x
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31218313519739084564910279918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 11:40:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 11:40:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexibility-services-tst.vattenfall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23859690516588081146989380375424285877107595845938884849951123969024886678880596996961102660991101452407140797407511826545765780632432321021585466067169970404112378793679812938667928196356284952436222854230298976409055010734792221678425685220618986922529005122160200166629355788544627456242162225974119449754655405517970499729292469380655983857063559343847532725825574897885948023429617382230949389665609758686704351551668971838297437377616104826387076473469237572008147291467846617886916371462355619473259754385303761491484060808273799106503521428873525276264209596203971380577247817686854188156074934481318071677371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexibility-services-tst.vattenfall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06f4f02f8a7c19cf5ce9728efcf16305372cf39a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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