connect.eneco.com

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:22:8c:9f:89:5d:23:f2:51:e9:09:52:2b:5d:ac:64 was issued on by Trust Provider B.V..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=connect.eneco.com

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 05:22:8c:9f:89:5d:23:f2:51:e9:09:52:2b:5d:ac:64
Serial Number (int): 6825530249249160705367762404265274468
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a8:8c:26:d1:ed:d2:05:a8:2d:21:c0:40:1a:2d:82:da:9a:37:65:41
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 4b:40:06:e7:89:bc:02:c1:eb:32:15:6a:69:ec:74:6d:e1:1e:6a:48
Fingerprint (sha256): 3c:17:1a:27:a3:84:be:35:42:b0:51:9a:8c:eb:7c:e4:ae:06:4a:28:21:94:03:8d:cc:38:eb:1b:d7:17:0c:56

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate connect.eneco.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.eneco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.eneco.com
connect1.eneco.com
connect2.eneco.com

Other certificates including the domain name eneco.com

(limited to 100 certificates)
iot-devicecontrol-api-sb.eneco.com
web.eneco.com
www.acc.eneco.nl
jira.eneco.com
jira.eneco.com
bdatest.eneco.com
cpqbt-a.eneco.com
cxo.eneco.com
enosappeeci.eneco.com
orion-avanti-d.eneco.com
jaarverslag2018.eneco.nl
confluence.eneco.com
cxo-test.eneco.com
eneco-crm15-p.eneco.com
bw-sap.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
enccn-winweigh-bwi-p.eneco.com
brandsite.eneco.com
www.acc.eneco.nl
webmail.eneco.nl
mijn.eneco.nl
mobileprint.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
jira.eneco.com
votum-group.com
www.eneco.nl
www.eneco.nl
axual-deploy.streaming-pt.eneco.com
nieuws.eneco.nl
odp-acc.eneco.com
www.eneco.nl
*.dev.vpp.eneco.com
schemas.streaming.eneco.com
fsws.eneco.com
www.eneco.nl
eneco-crm15-t.eneco.com
securityawareness.eneco.com
www.josefhalcomb.com
www.acc.eneco.nl
rest.streaming-pt.eneco.com
broker.streaming.eneco.com
*.acc.eneco.com
sts.eneco.com
rest.streaming.eneco.com
coin.eneco.com
jaarverslag2018.eneco.nl
svn.eneco.com
jira.eneco.com
ecsaz-abnav-apigee-absences-p.eneco.com
ecsaz-abnav-apigee-a.eneco.com
jira.eneco.com
selfservice.streaming-pt.eneco.com
msdms-p.eneco.com
fswsacc.eneco.com
www.eneco.nl
solman-sap.eneco.com
mijn.eneco.nl
www.acc.eneco.nl
esp-eet-gdm-prd.streaming.eneco.com
orion-api-dev.eneco.com
www.premium-cup.de
lyncdiscover.eneco.com
bda.eneco.com
extranet.eneco.com
axual-deploy.streaming.eneco.com
web.eneco.com
letzdoit.co.in
webmail.eneco.nl
bdaacc.eneco.com
e.eneco.com
nieuws.eneco.nl
esp-eet-vpp-prd.streaming.eneco.com
grafana.streaming-dta.eneco.com
odp-acc.eneco.com
agilepoint-p.eneco.com
connect.eneco.com
www.eneco.nl
www.eneco.nl
jaarverslag2018.eneco.nl
ecsaz-agilepoint-a.eneco.com
webmail.eneco.nl
extranet.eneco.com
extranet.eneco.com
connect.eneco.com
jira.eneco.com
www.acc.eneco.nl
web.eneco.com
mijn.eneco.nl
ideal-abn.eneco.com
www.acc.eneco.nl
www.acc.eneco.nl
www.acc.eneco.nl
www.eneco.nl
www.eneco.nl
connect.eneco.com
discovery.streaming.eneco.com
*.acc.eneco.com

Certificate

The complete raw certificate details for connect.eneco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxPYYLJpK0uvQ08BS2F/
QezlcbjYyJDpPejbTSAhlmnrKct9Z780s/7uO5ivXZau4LYZicpJQWNxph5J6uOM
84xiswToEq+lQvzIRh41GbkY/QGMKpImbAhkvWgM+N/pwTwYjYPxTAitKNnsKFUC
7voT5QHy3zxobB/W3AiUHf1yFD0BLvanbHzeZTviSuVOkRUF1vkDkmZuGYnSD4Gc
0pMGYzn8Qhavm6qt6AzDEqrAiYogdnom2Mjp+cSUDQoiS89PnizBNs33hjpnhifC
W1L1BBUYFleXX4rv40FrOfdvGlosS8kUo2gDgEHa+LvhxA/tXA3csrNkNUqlQDX6
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6825530249249160705367762404265274468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.eneco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25636161953523942163828327587473158896261454252969415336778599678634370148554930408263674420806946839372132725181871695876775196403546274706717886563906932716639778638779878720359864584114013383377586718776013063858603732981651984771899386096484368775615822939376671495486655919300744726798158433669050412777621123992251868980601988898982934578441234644298874408965702031410262446483795875169814552467354379158800780756552015916295039445167196641989536057920490898438571678247352050451375995904663326128697403848701790719092459991806402913964007192547243928525247764926453130745378972168496769687679445019083756927663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a88c26d1edd205a82d21c0401a2d82da9a376541
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.eneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect1.eneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2.eneco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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