live-energibutik.vattenfall.se

Issued by thawte DV SSL CA - G2

About this certificate

This digital certificate with serial number 26:25:dc:95:56:e7:58:31:c6:9f:f4:e2:a5:94:fa:0e was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=live-energibutik.vattenfall.se

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:25:dc:95:56:e7:58:31:c6:9f:f4:e2:a5:94:fa:0e
Serial Number (int): 50707252785596998980899901273485408782
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): 28:5d:35:1b:63:97:a7:3d:8d:98:c5:ae:af:c6:6f:9d:60:61:1d:44
Fingerprint (sha256): 22:5f:1b:7e:cd:3f:a2:1f:aa:d6:2b:cf:2a:b6:3b:78:31:8b:05:c5:88:2c:39:1f:58:5a:d2:40:93:5e:70:d0

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for certificate live-energibutik.vattenfall.se

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live-energibutik.vattenfall.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live-energibutik.vattenfall.se

Other certificates including the domain name vattenfall.se

(limited to 100 certificates)
solcellsguiden.vattenfall.se
bastpocket.vattenfall.se
www.vattenfall.se
ssl418473.cloudflaressl.com
selfserviceapi.vfretail-web-local.vattenfall.se
powerplants.vattenfall.com
autodiscover.vattenfall.com
incharge.vattenfall.se
energyplaza.vattenfall.se
ssl418475.cloudflaressl.com
ssl418475.cloudflaressl.com
heatbusinessportal.vattenfall.se
selfserviceapi.vfretail-web-dev.vattenfall.se
prelive-eshop.vattenfall.se
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
energysiteplus.vattenfall.se
powerplants.vattenfall.com
effektreserven.vattenfall.se
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
hydroinfoportal.vattenfall.se
electricpriceplus.vattenfall.se
webworkplace.vattenfall.se
corporate.vattenfall.se
energyplaza.vattenfall.se
bastpocketpda.vattenfall.se
vcr-tst.goincharge.com
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
*.vattenfall.se

energifragan.vattenfall.se
ssl418473.cloudflaressl.com
energyplazaupdates.vattenfall.se
preprod-karnkraft.vattenfall.se
www.vattenfall.se
csg.vattenfall.se
*.vattenfall.se
www2.vattenfall.se
auth.vattenfall.se
ssl418475.cloudflaressl.com
vcr.goincharge.com
corporate.vattenfall.se
energibutik.vattenfall.se
ssl418475.cloudflaressl.com
energifragan.vattenfall.se
powerplants.vattenfall.com
preedit-eshop.vattenfall.se
projekt.vattenfall.se
live-energibutik.vattenfall.se
ssl418473.cloudflaressl.com
ssl418474.cloudflaressl.com
fiskevatten.vattenfall.se
kundforum.vattenfall.se
energibutik.vattenfall.se
kundforum.vattenfall.se
www2.vattenfall.se
ssl418475.cloudflaressl.com
ssl418473.cloudflaressl.com
www2.vattenfall.se
solcellsguiden-test.vattenfall.se
www2.vattenfall.se
powerplants.vattenfall.com
edit-eshop.vattenfall.se
webworkplace.vattenfall.se
pihydro.vattenfall.se
vattenfall.se
ssl418475.cloudflaressl.com
energiexperten.vattenfall.se
ssl418475.cloudflaressl.com
powerplants.vattenfall.com
webworkplace.vattenfall.se
demo-energysiteplus.vattenfall.se
*.vattenfall.se
fiskevatten.vattenfall.se
ssl418474.cloudflaressl.com
elements.vattenfall.se
www2.vattenfall.se
kundforum.vattenfall.se
powerplants.vattenfall.com
powerplants.vattenfall.com
vcr.goincharge.com
applications.vattenfall.se
ssl418474.cloudflaressl.com
*.vattenfall.se
ssl418475.cloudflaressl.com
live-energibutik.vattenfall.se
energyplazaupdates.vattenfall.se
vattenfall.se
www.vattenfall.se
hydroinforportaldev.vattenfall.se
energifragan.vattenfall.se
portal-dev.incharge.vattenfall.se
energyplazaupdates.vattenfall.se
oh-acc.vattenfall.se
beta.vattenfall.se
sni.cloudflaressl.com
*.vattenfall.se
applications.vattenfall.se

Certificate

The complete raw certificate details for live-energibutik.vattenfall.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UWT59ySnhal3nibj7UH
Ck7qAasD6jEC/7kJKFaD6fpbwgQIxKz1TBbukI3m+XQ+FgZL3c59UrGkczEnApiS
y2DmWZL+zUOjN8RB6YRSCzeQOCG0fOtkNWqkCCxHsgQH2d5akX0XahUnCFUuUATU
o26kCZUjrnalGGYGv3cHilZveO5UjLcan4o7sx2b9bXagvzdCcpAwg4BNwHC9Jfk
OySyQhzH/4gbNMfDPnWjrurIMrNZFr9bztPli6MxdxpwlnImIBbxb0DcUjvoFM5X
Bw6QerOqZEwzsZiuuT7jXDplBM5Gnl1j6fwMUWL9makJtt2qx5VcWGv04KzpWtxS
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50707252785596998980899901273485408782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'live-energibutik.vattenfall.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30962694787255846540807155926919415931543123106907073715428325645992051455994965189288424419521002434387341092817073609484613251250299976744609592705501637876624815861096370482206474882474785623863536662960499183552017302014892484278274425506814119889612683783270826187798770723297315574977235769743031196601235837037835180611938587444362927353877992196041427198833539091275024769818466050687032740776831826271821934842472352218156687342481344641970603386437895169637386539604204737320951330519092276961028519550355439903911566706639026809611911562220942640846328447654741938658597655123069549098966690642599354323587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-energibutik.vattenfall.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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