extranet.eneco.com

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:4f:95:4a:b2:b5:80:67:0b:d5:d4:44:ea:5b:e7:04 was issued on by Trust Provider B.V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=extranet.eneco.com

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:4f:95:4a:b2:b5:80:67:0b:d5:d4:44:ea:5b:e7:04
Serial Number (int): 9717815419541386332761646811880089348
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 78:54:e6:51:14:e5:49:cb:54:37:f4:d9:54:fa:4d:ee:71:5e:db:48
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): b9:c7:d2:ad:07:2d:85:ef:71:13:0e:f0:5a:9a:bd:88:21:42:8a:96
Fingerprint (sha256): 32:6d:3b:5e:65:e0:08:0b:00:06:9b:38:41:1b:a9:37:0c:3c:ee:b8:dd:65:37:54:ba:20:a5:7e:9d:32:e4:df

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate extranet.eneco.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extranet.eneco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extranet.eneco.com
extranet1.eneco.com
extranet2.eneco.com

Other certificates including the domain name eneco.com

(limited to 100 certificates)
iot-devicecontrol-api-sb.eneco.com
web.eneco.com
www.acc.eneco.nl
jira.eneco.com
jira.eneco.com
bdatest.eneco.com
cpqbt-a.eneco.com
cxo.eneco.com
enosappeeci.eneco.com
orion-avanti-d.eneco.com
jaarverslag2018.eneco.nl
confluence.eneco.com
cxo-test.eneco.com
eneco-crm15-p.eneco.com
bw-sap.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
enccn-winweigh-bwi-p.eneco.com
brandsite.eneco.com
www.acc.eneco.nl
webmail.eneco.nl
mijn.eneco.nl
mobileprint.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
jira.eneco.com
votum-group.com
www.eneco.nl
www.eneco.nl
axual-deploy.streaming-pt.eneco.com
nieuws.eneco.nl
odp-acc.eneco.com
www.eneco.nl
*.dev.vpp.eneco.com
schemas.streaming.eneco.com
fsws.eneco.com
www.eneco.nl
eneco-crm15-t.eneco.com
securityawareness.eneco.com
www.josefhalcomb.com
www.acc.eneco.nl
rest.streaming-pt.eneco.com
broker.streaming.eneco.com
*.acc.eneco.com
sts.eneco.com
rest.streaming.eneco.com
coin.eneco.com
jaarverslag2018.eneco.nl
svn.eneco.com
jira.eneco.com
ecsaz-abnav-apigee-absences-p.eneco.com
ecsaz-abnav-apigee-a.eneco.com
jira.eneco.com
selfservice.streaming-pt.eneco.com
msdms-p.eneco.com
fswsacc.eneco.com
www.eneco.nl
solman-sap.eneco.com
mijn.eneco.nl
www.acc.eneco.nl
esp-eet-gdm-prd.streaming.eneco.com
orion-api-dev.eneco.com
www.premium-cup.de
lyncdiscover.eneco.com
bda.eneco.com
extranet.eneco.com
axual-deploy.streaming.eneco.com
web.eneco.com
letzdoit.co.in
webmail.eneco.nl
bdaacc.eneco.com
e.eneco.com
nieuws.eneco.nl
esp-eet-vpp-prd.streaming.eneco.com
grafana.streaming-dta.eneco.com
odp-acc.eneco.com
agilepoint-p.eneco.com
connect.eneco.com
www.eneco.nl
www.eneco.nl
jaarverslag2018.eneco.nl
ecsaz-agilepoint-a.eneco.com
webmail.eneco.nl
extranet.eneco.com
extranet.eneco.com
connect.eneco.com
jira.eneco.com
www.acc.eneco.nl
web.eneco.com
mijn.eneco.nl
ideal-abn.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
www.eneco.nl
connect.eneco.com
discovery.streaming.eneco.com
*.acc.eneco.com

Certificate

The complete raw certificate details for extranet.eneco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhu4c//PvBFmLkhTC2dF
h3ONMIZyfgjsp5DvrWjg9HvIoTQE3jb8eCaKpLTCcHyMzWELxJuhcSuVAMAO+mXW
zsBTjDTcfdO+HM5XOjRJ4rqn/MQolWwzQTfen5KWpp58/Il0U20jKTbyn5fQqeiH
Oq0qKpmH/cD07JpHJ6l7BlauLy3GP5E+pJrBYfZ7kXi2Of8XMG1lTFJoWmkAHFaw
vh2QIxQiH70wl4NvP7j+IfnDELtjMUu/RyPf4hWclzldvI7x6JrmLjIDRmXGjuFc
cDVcrXqM8eGvwNOZnJgVhCpW+Ul4YvFs4uxZ2K+ZTWf8Dh7PaaFEObJQH8sTHf9m
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9717815419541386332761646811880089348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extranet.eneco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24503900661300625441830290777316406465742845944643419054263017723174202647552400355324873046379281833357367763826703800753720462467955178567363509410752065017209125309263994685749069402125322353520303304656891893660638644027815844821248385413657014390433009026355111935577328762068715498071882409170404591407299067173567921938542892026603863959688001167501881396692193250134852695208960662243054081295449229659235582418699625512486717520767386371165928834040725618054626517263204199570992500657510142516562407104007220721096815836265165703521093096089562351282113006221978281398062177416453444809591618805880204519097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7854e65114e549cb5437f4d954fa4dee715edb48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.eneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet1.eneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet2.eneco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005f9fa5c0a06d26045b1f44ceae82878a1dc0aad3882fe54330b749fe19b60aec3648f0e29ad2912f995bc90fde2e2d2155b58e4806715b64e5b47145c79047d3119840cfd618470519716f4409558abcf6511360e6cda35d98b6d3ec25540dd78fa7e4e5bd947fdfc49379ad01200c097dcf572c6b7ed310095c6fceaadd056d7d1da1c3f4582e485eef02df5700c16a9f2b7e2aed2f98885e48d3ebb6647fce6c1d19f010be30218724069008c1968027cb3cf3cc71ceb8693f0926afe5a40e92123a854936da9fa0e765dbf1495cf99ec58128405b9308aa70e05cd5806da9b8f63bd2902653187fccf4cb4680917dacff21dadab39444303a6bcec715be9e