talkmobile.co.uk

- Vodafone Group Services Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:47:66:77:63:32:32:a9:e0:81:8d:57:bb:a6:9f:ec was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vodafone Group Services Limited

Organization: Vodafone Group Services Limited
Locality: Newbury
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:47:66:77:63:32:32:a9:e0:81:8d:57:bb:a6:9f:ec
Serial Number (int): 8346099316296081182183075798522961900
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8e:dc:f5:c0:7c:c2:0e:1f:7b:55:96:03:c3:56:cf:d1:9f:81:7a:24
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b9:79:e1:eb:ad:08:23:78:a9:90:0d:fc:da:5d:70:8b:4e:8c:5e:5a
Fingerprint (sha256): 23:e8:06:29:64:01:87:8b:5a:17:a9:7a:ab:1a:6a:24:e0:0a:a1:e1:9d:4d:79:f6:c9:ea:1b:f9:f2:cb:b1:39

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate talkmobile.co.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for talkmobile.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

talkmobile.co.uk
myaccount.talkmobile.co.uk
www.talkmobile.co.uk
www.myaccount.talkmobile.co.uk

Other certificates including the domain name talkmobile.co.uk

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
topup.talkmobile.co.uk
magentocloud54.map.fastly.net
imperva.com
imperva.com
magentocloud54.map.fastly.net
imperva.com
imperva.com
mcstaging.talkmobile.co.uk
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
incapsula.com
mcprod.talkmobile.co.uk
dg-0026-6664b28.client-tls.adestra.com
incapsula.com
imperva.com
talkmobile.co.uk
imperva.com
res.levexis.com
www.talkmobile.co.uk
imperva.com
topup.talkmobile.co.uk
talkmobile.co.uk
www.talkmobile.co.uk
talkmobile.co.uk
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
www.talkmobile.co.uk
imperva.com
imperva.com
incapsula.com
talkmobile.co.uk
imperva.com
imperva.com
res.levexis.com
incapsula.com
magentocloud54.map.fastly.net
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
talkmobile.co.uk
www.talkmobile.co.uk
imperva.com
mcstaging.talkmobile.co.uk
www.talkmobile.co.uk
imperva.com
imperva.com
talkmobile.co.uk
incapsula.com
talkmobile.co.uk
magentocloud54.map.fastly.net
imperva.com
magentocloud54.map.fastly.net
imperva.com
magentocloud54.map.fastly.net
imperva.com
talkmobile.co.uk
mcstaging.talkmobile.co.uk
imperva.com
imperva.com
dg-0026-6664b28.client-tls.adestra.com
imperva.com
imperva.com
imperva.com
talkmobile.co.uk
magentocloud54.map.fastly.net
imperva.com
incapsula.com
imperva.com
dg-0026-6664b28.client-tls.adestra.com
imperva.com
imperva.com
www.talkmobile.co.uk
sales.talkmobile.co.uk
incapsula.com
talkmobile.co.uk
magentocloud54.map.fastly.net
www.talkmobile.co.uk
incapsula.com
imperva.com
www.talkmobile.co.uk
imperva.com
myaccount.talkmobile.co.uk
magentocloud54.map.fastly.net
res.levexis.com
mcstaging.talkmobile.co.uk

Certificate

The complete raw certificate details for talkmobile.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LtU3+keCYGA0FqbfOMp
gYNcpdAjx+Caajpj8SxVaokvjoNt7RV7ggWKRmMDEGRv/hoScTi38Kp+PHH8ybsd
ydwjteUvhAJit2B6FQndkKiiq85I5OMKK2BP+5af14cEEH7VltImPvM6wJUcMuK0
Rv1QBPHp9NNOW83NcGGXTa5l7E3c0BOHKHpAhgBQM0uZELjiWyePeUX/yVNyso9I
2TJh9x2NXCtTk3rHah/h6OTS/lKcR4Ih4jlXLBNNDxByC34kDceyA7DsTfOlGNyx
XCg0Zr3IRywSQ18Ku8Oi/NVuOkHPytuFfT8JzrfN3MVs5+6a9LDf8JpqVHRyiFvO
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8346099316296081182183075798522961900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vodafone Group Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'talkmobile.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27359850498758011154569826185368974299675864557045126555368554878991830834664203734747038199431617191470314274174609094593185797944633923426744729059756974122121584561315929848473915446015415481682533629325305496272819072779131162131022528024820432356271094832477212670059889121748296805544242018872168501795593446790962714451715497843470722705529280632461543673657444403146243310497368833672571990896578294943997550150240947857865792126418182266011540428500478989049136747974396851281946314008188644562585761778967712019132011858618560782945739693945726116410445642422109293697863060087852172016389589268238335463081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8edcf5c07cc20e1f7b559603c356cfd19f817a24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.talkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaccount.talkmobile.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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