portal-dev.incharge.vattenfall.se

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 1a:87:89:b5:67:76:23:2c:b2:06:14:4a:10:bf:b4:23 was issued on by Sectigo Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal-dev.incharge.vattenfall.se

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:87:89:b5:67:76:23:2c:b2:06:14:4a:10:bf:b4:23
Serial Number (int): 35263681028742905151668456675637965859
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: c0:0c:b6:e5:de:87:57:4c:22:49:25:91:34:21:0f:aa:fc:d6:81:d4
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7c:db:0c:2a:bd:8b:19:3c:1a:30:39:50:c6:03:0d:28:a3:b9:c3:25
Fingerprint (sha256): 43:f7:30:6f:c9:4b:35:4c:13:33:be:15:e1:4e:b8:8f:86:1a:ff:4e:80:1f:50:20:e3:30:eb:fe:5e:a7:e3:d3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate portal-dev.incharge.vattenfall.se

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal-dev.incharge.vattenfall.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal-dev.incharge.vattenfall.se
portal-dev.incharge.vattenfall.de
portal-dev.incharge.vattenfall.nl
portal-tst.incharge.vattenfall.de
portal-tst.incharge.vattenfall.nl
portal-tst.incharge.vattenfall.se

Other certificates including the domain name vattenfall.se

(limited to 100 certificates)
solcellsguiden.vattenfall.se
bastpocket.vattenfall.se
www.vattenfall.se
ssl418473.cloudflaressl.com
selfserviceapi.vfretail-web-local.vattenfall.se
powerplants.vattenfall.com
autodiscover.vattenfall.com
incharge.vattenfall.se
energyplaza.vattenfall.se
ssl418475.cloudflaressl.com
ssl418475.cloudflaressl.com
heatbusinessportal.vattenfall.se
selfserviceapi.vfretail-web-dev.vattenfall.se
prelive-eshop.vattenfall.se
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
energysiteplus.vattenfall.se
powerplants.vattenfall.com
effektreserven.vattenfall.se
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
hydroinfoportal.vattenfall.se
electricpriceplus.vattenfall.se
webworkplace.vattenfall.se
corporate.vattenfall.se
energyplaza.vattenfall.se
bastpocketpda.vattenfall.se
vcr-tst.goincharge.com
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
*.vattenfall.se

energifragan.vattenfall.se
ssl418473.cloudflaressl.com
energyplazaupdates.vattenfall.se
preprod-karnkraft.vattenfall.se
www.vattenfall.se
csg.vattenfall.se
*.vattenfall.se
www2.vattenfall.se
auth.vattenfall.se
ssl418475.cloudflaressl.com
vcr.goincharge.com
corporate.vattenfall.se
energibutik.vattenfall.se
ssl418475.cloudflaressl.com
energifragan.vattenfall.se
powerplants.vattenfall.com
preedit-eshop.vattenfall.se
projekt.vattenfall.se
live-energibutik.vattenfall.se
ssl418473.cloudflaressl.com
ssl418474.cloudflaressl.com
fiskevatten.vattenfall.se
kundforum.vattenfall.se
energibutik.vattenfall.se
kundforum.vattenfall.se
www2.vattenfall.se
ssl418475.cloudflaressl.com
ssl418473.cloudflaressl.com
www2.vattenfall.se
solcellsguiden-test.vattenfall.se
www2.vattenfall.se
powerplants.vattenfall.com
edit-eshop.vattenfall.se
webworkplace.vattenfall.se
pihydro.vattenfall.se
vattenfall.se
ssl418475.cloudflaressl.com
energiexperten.vattenfall.se
ssl418475.cloudflaressl.com
powerplants.vattenfall.com
webworkplace.vattenfall.se
demo-energysiteplus.vattenfall.se
*.vattenfall.se
fiskevatten.vattenfall.se
ssl418474.cloudflaressl.com
elements.vattenfall.se
www2.vattenfall.se
kundforum.vattenfall.se
powerplants.vattenfall.com
powerplants.vattenfall.com
vcr.goincharge.com
applications.vattenfall.se
ssl418474.cloudflaressl.com
*.vattenfall.se
ssl418475.cloudflaressl.com
live-energibutik.vattenfall.se
energyplazaupdates.vattenfall.se
vattenfall.se
www.vattenfall.se
hydroinforportaldev.vattenfall.se
energifragan.vattenfall.se
portal-dev.incharge.vattenfall.se
energyplazaupdates.vattenfall.se
oh-acc.vattenfall.se
beta.vattenfall.se
sni.cloudflaressl.com
*.vattenfall.se
applications.vattenfall.se

Certificate

The complete raw certificate details for portal-dev.incharge.vattenfall.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KXw1BGftEa2n24fbU03
G/f4ctN72N4/P50X2mznGIAVNKEcZp++PmLD27I3YGWCbZ9y9AyozxoJky1ls1hQ
RU3HxjND5b6W6aQ4vgc6wJYrslfq8Y8ivBuCHVeWQKt0Pzxw/HM5hpYUc690ymZN
8yaMcBf7/NS5HdYkT5GtSBNR9Nrya/tfVw5Xv6786PI3UWsjS815XehyVCrFG37J
RGAN1DA9WfLmpLmvd/DTbyHHufE+UDppsPZFPKJcTdsbVun4bKseid8a0LjF1wld
Y9ckDjwn34q8z0jTFqcJpDMqroR8Sp33MzPUQXCbcRRqeHn4B+zsnrMv3vGt+Gmd
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35263681028742905151668456675637965859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal-dev.incharge.vattenfall.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28359208739063426084771085845871014997143430180763642965828357660531454803370538868577952044833647433968372517598056249623515895770365618211673077886902359155714755056997988641947582720040153678120841099579135612045030751016575475650929449192237220154625155221686835473873966142739320718823349367976139857996442421847729052443153479410772586755771342386107737660350199642789093425631573131457554615116928271853210839165443658840307660301354849198293851501150274188949308141386506100858503716224213134747766850692505255964468530858726809810859811818694735860599263736285288497470491084237060083642682984676103228595461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c00cb6e5de87574c2249259134210faafcd681d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.incharge.vattenfall.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.incharge.vattenfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-dev.incharge.vattenfall.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-tst.incharge.vattenfall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-tst.incharge.vattenfall.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-tst.incharge.vattenfall.se'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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