cap1.cw.com

- vodafone -

Issued by Vodafone (Corporate Services 2009)

About this certificate

This digital certificate with serial number 77:00:1b:31:53:ef:af:23:43:d7:8a:83:d9:00:01:00:1b:31:53 was issued on by Vodafone Group.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The country name field MUST contain the two-letter ISO code for the country or XX (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

vodafone

Organization: vodafone
State / Province: Bracknell
Locality: Bracknell
Country: UK

Vodafone Group

Organization: Vodafone Group
Country: UK

This certificate has expire since

Certificate Details

Serial Number (hex): 77:00:1b:31:53:ef:af:23:43:d7:8a:83:d9:00:01:00:1b:31:53
Serial Number (int): 2653797931817044823638236434110916688187437395
Serial Number lenght: 151 bits, 19 octets

SubjectKeyId: 2f:af:27:8b:b3:b1:7b:22:44:8e:d4:b7:a3:41:a9:ce:27:80:c7:c9
AuthorityKeyId: 54:71:e4:33:4e:e5:a8:a9:30:b7:c7:29:6c:e0:d8:12:1f:c3:9d:b8

Fingerprint (sha1): 16:bb:5b:29:4b:18:4c:62:1b:e9:3d:a8:da:1f:72:09:26:c2:08:dd
Fingerprint (sha256): ae:57:47:5e:a3:b1:f0:b2:39:90:01:5b:4c:e5:52:dc:7c:6a:cb:44:6e:2a:48:b3:d9:cc:cb:9c:90:63:32:12

Issuing Certificate URL: http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer

Revocation information

OCSP Server: http://ocsp.ca.vodafone.com/ocsp
CRL Distribution Point: http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl

Check the revocation status for certificate cap1.cw.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cap1.cw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cap1.cw.com
cap.cw.com
cap1.vodafone.com
cap.vodafone.com

Other certificates including the domain name cw.com

(limited to 100 certificates)
cap2.cw.com
wwc.cw.com
icmr.itms.system.cw.com
vitmsbptl6.itms.system.cw.com
www.b2btt-cob.cw.com
customerlink.cw.com
customerlink.cw.com
*.cwextra.cw.com
webtop.cw.com
remote.viridor.co.uk
www.b2btt.cw.com
www.b2btt.cw.com
portal.cw.com
www.b2btt-cob.cw.com
web.cw.com
vitmsaptl6.itms.system.cw.com
wdslportal.cw.com
e12.cw.com
transaction.cw.com
imperva.com
srportal.cw.com
customerlink.cw.com
safe-swi.cw.com
webservices-cob1.cw.com
wipro1.webservices.cw.com
cap2.cw.com
www.support.cw.com
imperva.com
wwc.cw.com
support.cw.com
cw.com
customerlink.cw.com
mail.cw.com
customerlink.cw.com
portal.cw.com
testcustomerlink.cw.com
wwc.cw.com
web.cw.com
gbvls-as056.ad.plc.cwintra.com
*.onlinebackup.cw.com
customerlink.cw.com
www.mystats.cw.com
customerlink.cw.com
srportal.cw.com
icmr.itms.system.cw.com
cap.cw.com
webservices-cob1.cw.com
vitmsasql10.itms.system.cw.com
www.mystats4.cw.com
c3c.cw.com
customerlink.cw.com
safe-sma.cw.com
cap2.cw.com
gbvls-as056.ad.plc.cwintra.com
cap1.cw.com
e-billing.cw.com
cap2.cw.com
www.b2btt-cob2.cw.com
www.b2btt-cob2.cw.com
rasmsl.cw.com
www.c3c.cw.com
cap.cw.com
cap1.cw.com
wwc.cw.com
www.mystats-360.cw.com
rasmsl.cw.com
support.cw.com
transaction.cw.com
support.cw.com
customerlink.cw.com
www.mystats4.cw.com
rasmsl.cw.com
dcwebmail.cw.com
rasmsl.cw.com
e-billing.cw.com
web1.gdoc.cw.com
mycw.cw.com
mail.cw.com
support.cw.com
*.onlinebackup.cw.com
portal.cw.com
www.pensions.cw.com
gbvls-as056.ad.plc.cwintra.com
support.eu.cw.com
vitmsbsql10.itms.system.cw.com
e14.cw.com
gbvls-as057.ad.plc.cwintra.com
cap1.cw.com
sit2-appserver1.labs.cw.com
support.cw.com
sit2-appserver1.labs.cw.com
www.b2bprovide-cob.cw.com
remote.viridor.co.uk
webservices.cw.com
wipro.webservices.cw.com
www.mystats4.cw.com
support.cw.com
gbvls-as058.ad.plc.cwintra.com
www.mystats4.cw.com
host.safe-lab.cw.com

Certificate

The complete raw certificate details for cap1.cw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG/dllOWzwPtc3vit1/o
nVwal/RVZJ9AZIH8rfI+grgFq5V+KHh0FbEEKYS5bmCi4efNIjBomSJWQc6Bo7aw
s6/byf3vctjtnJ1OSaTD1gxjjVOMbn8MJ/KVJ5hTMvo4klmfLGizoWWt+rcw8Q07
iupB79b1xiWmacgi5t1zxMz8AbKHBQ8xEhDtU6etS20gWbUv8A0Z4CtHo1x318D+
vW+BYX+uPBwop5Om5wGqGZ7ch0s2u4U9Wa3P0+7DUJLc1c711a9Ff161JClDjNgs
b1AcopOZQqlWAJS3a5trv79rUymniJJeQINpe2l5Skhi3j+aYIF80uw0TWiPrtb3
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2653797931817044823638236434110916688187437395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vodafone (Corporate Services 2009)'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-13 09:40:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-12 09:40:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bracknell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bracknell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vodafone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cap1.cw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21263198205307412814282850194180975859102530450755899696799736641337791303797855183521903265444394135814713562829531017295671325955955391004850403160309643768935955522480817537324403335596394467589972968926576660160236005716920162808204137137501211216742237150006272020082052948731461748996049932060433759742887583591930229185969176076009216386552056080384142811868570062956320041216306740266915525475780118885906671751604521049427263000540208314080857155020452136108568146809889288799114645662667838148638949147126147781597469300972442846282921173953335515466537833708473682971898716160458926953617071234558299928541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap1.cw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.cw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap1.vodafone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.vodafone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2faf278bb3b17b22448ed4b7a341a9ce2780c7c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5471e4334ee5a8a930b7c7296ce0d8121fc39db8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.vodafone.com/crl/VodafoneCorporateServices2009(1).crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ca.vodafone.com/cert/VodafoneCorporateServices2009(1).cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.vodafone.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.1475819.1923179.2641816.6959893.4978592.187.437978.12383092
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.826.0.1.1833679.1.1.5.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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