bda.eneco.com

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:08:26:57:10:96:bd:8f:69:0b:ea:44:93:54:04:f9 was issued on by Trust Provider B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bda.eneco.com

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:08:26:57:10:96:bd:8f:69:0b:ea:44:93:54:04:f9
Serial Number (int): 10676139970696677311534962644939441401
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:8f:f6:a2:e3:4b:da:fe:e6:17:a6:75:f9:92:a2:fa:23:e9:c4:df
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 3a:59:d7:42:37:cb:41:0c:02:64:0c:30:dc:b0:bd:dd:bb:dd:0a:d3
Fingerprint (sha256): 31:87:1c:0a:df:23:18:2d:ce:51:ff:23:77:cc:dd:51:b0:79:0e:2d:a8:9c:1b:21:4b:15:2a:7b:04:7f:16:ed

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate bda.eneco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bda.eneco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bda.eneco.com

Other certificates including the domain name eneco.com

(limited to 100 certificates)
iot-devicecontrol-api-sb.eneco.com
web.eneco.com
www.acc.eneco.nl
jira.eneco.com
jira.eneco.com
bdatest.eneco.com
cpqbt-a.eneco.com
cxo.eneco.com
enosappeeci.eneco.com
orion-avanti-d.eneco.com
jaarverslag2018.eneco.nl
confluence.eneco.com
cxo-test.eneco.com
eneco-crm15-p.eneco.com
bw-sap.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
enccn-winweigh-bwi-p.eneco.com
brandsite.eneco.com
www.acc.eneco.nl
webmail.eneco.nl
mijn.eneco.nl
mobileprint.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
jira.eneco.com
votum-group.com
www.eneco.nl
www.eneco.nl
axual-deploy.streaming-pt.eneco.com
nieuws.eneco.nl
odp-acc.eneco.com
www.eneco.nl
*.dev.vpp.eneco.com
schemas.streaming.eneco.com
fsws.eneco.com
www.eneco.nl
eneco-crm15-t.eneco.com
securityawareness.eneco.com
www.josefhalcomb.com
www.acc.eneco.nl
rest.streaming-pt.eneco.com
broker.streaming.eneco.com
*.acc.eneco.com
sts.eneco.com
rest.streaming.eneco.com
coin.eneco.com
jaarverslag2018.eneco.nl
svn.eneco.com
jira.eneco.com
ecsaz-abnav-apigee-absences-p.eneco.com
ecsaz-abnav-apigee-a.eneco.com
jira.eneco.com
selfservice.streaming-pt.eneco.com
msdms-p.eneco.com
fswsacc.eneco.com
www.eneco.nl
solman-sap.eneco.com
mijn.eneco.nl
www.acc.eneco.nl
esp-eet-gdm-prd.streaming.eneco.com
orion-api-dev.eneco.com
www.premium-cup.de
lyncdiscover.eneco.com
bda.eneco.com
extranet.eneco.com
axual-deploy.streaming.eneco.com
web.eneco.com
letzdoit.co.in
webmail.eneco.nl
bdaacc.eneco.com
e.eneco.com
nieuws.eneco.nl
esp-eet-vpp-prd.streaming.eneco.com
grafana.streaming-dta.eneco.com
odp-acc.eneco.com
agilepoint-p.eneco.com
connect.eneco.com
www.eneco.nl
www.eneco.nl
jaarverslag2018.eneco.nl
ecsaz-agilepoint-a.eneco.com
webmail.eneco.nl
extranet.eneco.com
extranet.eneco.com
connect.eneco.com
jira.eneco.com
www.acc.eneco.nl
web.eneco.com
mijn.eneco.nl
ideal-abn.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
www.eneco.nl
connect.eneco.com
discovery.streaming.eneco.com
*.acc.eneco.com

Certificate

The complete raw certificate details for bda.eneco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXyjgPC6AYGturDh1T5B
m+oQTI8N9ZSj/0T0gd5skKb+9YfhIjB2nc3rxeYjjC0vL1fiQ6Gr5uCKRO/WYM9y
1HtdHpt2rxnIxDvvLoQgj084Ji+Bv1B9ed01Yi4i0dn1EKSJuGHHwmAEN4DkZgzS
j4XNsDzQusF0+XgW7C/4SjDb/8646qtbWc9X0dEC6VbsJcn1qtCNqkvbri3JnQas
d+9kk1GW3ASBIoOahb0bSod7IZmGkOjWsM6fgwEEk8AFQhpNyhIL8eR0AoQ/wlv+
BH5EZxU0fXoaa6iSUhJgjzaCmFmrJyvNbOcFD9mFdt9E6/HTx6ds4R3qRnFXQJyw
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10676139970696677311534962644939441401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bda.eneco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20385828726418412066527095932674579972034983274187997871077060158636602096765957913666812162413592163705325256739503903866185823123578942071282647666741631694115421653547338076054785376202426405195510074506830730675049888277993055643207165326912690561809908435337881091387055022644315545056317886653755849752832412567957268832658714071219535634078823115308309115983591958754595677271460844962303121077844939082622171308141689576786554828441597387285820264563296165465681464182198156210185458661091683736293670730300838514198332090482408157235842111011429823397716423660532878979215199874632930842281760100368995102749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb8ff6a2e34bdafee617a675f992a2fa23e9c4df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bda.eneco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b774c1b76b5e8829f0c910e4e7f3fc4c834e4e4a395a49d0f962d46e8fd5d5457060226404499514ff1d62b1aa99927bd054208215e2a99ee436e6ce0cda3ce2d957e77b70af1f729de6fd9b9fbafd1b0c1593df2bb52e5e04c09d48aab4300fc20dd1f6316a88cc19097e6d4ffc5458e06e5194ff13fcb88f2eb2b80d86735c216886b34b38a59779ef339375002a2911bcb2d24f8fd98c4e5dc859e530199af96061a8393f130fc78d16b6727504c761e1e311a62b38d93734fdacc734b65ed330e889f99c844f80e19825f15da363576cd5a7831e353a7174e06754d86c36f7b338e4a99c8b85822491f4cc4dc38b49c8d821f2645c5dc14e9ef8bbe3dbd