ciam.sh-netz.com

- E.ON SE -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 5d:01:b2:91:8b:7f:1b:7d:9f:2c:e3:68:49:f0:22:c1:45:77:f0:a0 was issued on by QuoVadis Limited.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

E.ON SE

Organization: E.ON SE
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate will expire on

Certificate Details

Serial Number (hex): 5d:01:b2:91:8b:7f:1b:7d:9f:2c:e3:68:49:f0:22:c1:45:77:f0:a0
Serial Number (int): 530973997945077333929783443116148268956548329632
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c3:a3:a4:34:3c:8d:9b:c0:56:ff:f6:1b:27:d8:7a:5c:4e:83:f7:11
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 85:47:3e:54:4c:d8:bf:22:97:76:f3:c8:3b:1c:ef:5a:fd:32:ec:07
Fingerprint (sha256): 40:82:3e:b3:f1:21:d2:e8:79:77:d3:2e:f9:54:5a:44:89:a5:75:78:1f:e9:c1:a9:96:a0:f7:6a:7e:e5:57:bb

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate ciam.sh-netz.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ciam.sh-netz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ciam.sh-netz.com
pp-ciam.sh-netz.com
qa-ciam.sh-netz.com
ft-ciam.sh-netz.com
dev-ciam.sh-netz.com

Other certificates including the domain name sh-netz.com

(limited to 100 certificates)
sfbotde1.eon.com
netzportal.eon.com
test-netzportal.eon.com
energieportal-dev.sh-netz.com
qa-login.bayernwerk.de
netzportal.eon.com
netzportal.eon.com
netzportal.eon.com
www.sh-netz.com
netzportal.eon.com
netzportal.eon.com
netzportal.eon.com
www.sh-netz.com
api-energiemonitor.eon.com
energiedaten.sh-netz.com
smexnet.sh-netz.com
netzportal.bayernwerk.de
dev-netzportal.eon.com
mail.dsc-e.com
loma.sh-netz.com
netzportal.eon.com
enko.sh-netz.com
ciam.sh-netz.com
test-netzportal.eon.com
energiedaten.sh-netz.com
login-dev.test-netzportal.bayernwerk.de
d-api-energiemonitor.eon.com
qa-netzportal.eon.com
www.sh-netz.com
www.sh-netz.com
energiedaten.sh-netz.com
energieportal-qa.sh-netz.com
login.bayernwerk.de
api-energiemonitor.eon.com
www.sh-netz.com
sh-netz.com
www.sh-netz.com
api-energiemonitor.eon.com
netzportal.eon.com
www.sh-netz.com
d-api-energiemonitor.eon.com
netzportal.eon.com
meine-it.sh-netz.com
login.bayernwerk.de
sfbotde1.eon.com
sh-netz.com
www.sh-netz.com
www.sh-netz.com
www.sh-netz.com
qa.sh-netz.com
login-netzportal.bayernwerk.de
login.netzportal.bayernwerk.de
poc-smexnet.sh-netz.com
acs-03-haw-eon-energy-networks.eon.com
d-api-energiemonitor.eon.com
www.sh-netz.com
test-netzportal.bayernwerk.de
sni1d5fcgl.wpc.edgecastcdn.net
ferienwerk.sh-netz.com
acs-06-iconnect-eon-energy-networks.eon.com
login.bayernwerk.de
www.sh-netz.com
enko.sh-netz.com
netzportal.eon.com
mail.dsc-e.com
enko.sh-netz.com
loma.sh-netz.com
energiedaten.sh-netz.com
sni1d5fcgl.wpc.edgecastcdn.net
energieportal.sh-netz.com
sni1d6b3gl.wpc.edgecastcdn.net
api-energiemonitor.eon.com
sh-netz.com
pqa.bayernwerk-netz.de
poc-smexnet.sh-netz.com
login-netzportal.bayernwerk.de

Certificate

The complete raw certificate details for ciam.sh-netz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyFMJaU26oqOPKeheUkY
jOWRUvwNxnwPw+RlX1o35faDMkD8y7tHPpQyp2giZaImzfuGao6w1Leub+Rg+0di
Bcz7kn/hH60PYlCBhw2sjGJcfigVcgJJ4LH9rm5kbgeAEGzzA5TWtDBHgVoq6s+w
CRshEmgFn4+FlK5DLsU3bWBfIPDu+QER5XQ3PDQwXiVWzR3ENtvbU9JEp9JWfmOZ
bVcgT3jDZmkGBdG9mTjkDJYSoZvRLHbSJ9+FJJ20SfVyJ2r1N7XyN/UolAJD78IB
Fn5rrOhiSqN5IqiA0ObeIhlw+fvlxtgrGiDfy5D6vTkonMXpNz4Nunp2ca46mVvt
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 530973997945077333929783443116148268956548329632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 09:49:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'E.ON SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ciam.sh-netz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23118029393065371461614523047816267359718839807198293032451686620185549894918403226355757897191737682525954822935472754187185770401664130111951516282624721460741908410463913840192344239528291511329131690115307013814317201647816927857493571188242805760082178527220103631409427171501537398704649581356330991044633607145223009456143720680596533635834821073998395865856760290651952216106192162443770463339534799235623484327326741216819433340685052371898014014410114387613739612937400803500993069689840899558049102400197839043798405537871561864828426380234146277372820541993013444593451041625205184688480577737116455005553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciam.sh-netz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp-ciam.sh-netz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-ciam.sh-netz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ft-ciam.sh-netz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ciam.sh-netz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3a3a4343c8d9bc056fff61b27d87a5c4e83f711
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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