Public Key Infrastructure at Vattenfall

Vattenfall now offers its commercial and private customers the possibility of sending encrypted messages to Vattenfall employees. Vattenfall IT Infrastructure Services operates an applications environment for this purpose on behalf of Vattenfall, which allows all e-mail participants in the Vattenfall group to send and receive encrypted messages. The Vattenfall Group operates a common Public Key Infrastructure ("Vattenfall PKI") that provides personal certificates based on X.509 v.3 standard for all employees ("Vattenfall Certificates"). Public certificate directory Vattenfall offers a directory of issued certificates for searching the public key of a Vattenfall employee by its e-mail address. To do so, please follow the instructions below.

Since 2013 our company also uses certificates from D-TRUST GmbH for some addresses. You can search for them here.

  • Insert the exact e-mail address in the searching field.
  • Begin the search by clicking the search-button
  • If a suitable entry exists, the public key is offered to you.
  • Download the public key to your computer and embed it into your e-mail programme.
  • Alternatively you can download the public key in vCard format and import it directly into Microsoft Outlook as a contact.
  • E-mail address:
    Choose output format 

Certificate validity check

You can download the certification authority certificates and certification revocation lists ("CRL") needed for validating the Vattenfall certificates from the following links.
  1. Vattenfall Root CA 2017
    • valid from
      • 17 ‎January, ‎2017 to ‎17 ‎January, ‎2037 11:23:52
    • certificate fingerprint
      • 0c e2 9d 65 04 c4 2a 4f c8 6a 19 e2 15 5e 73 cd 27 22 cc 87
    • Download all certificates of Vattenfall's two-tier CA hierarchy (2017)
    • Download the certificate revocation lists
  2. Vattenfall Root Authority certificate

Limited warranty and disclaimer / Limitation of liability

Except as explicitly provided in an applicable agreement with an Authorized Relying Party or Subscriber, Vattenfall Issuing CA(s) expressly disclaims all representations, warranties (express or implied) and liability -- except for willful misconduct and gross negligence -- concerning the functionality, issuance, use, validity, or accuracy of Vattenfall Certificates, including the identity of any person named by a Vattenfall Certificate or their authority to act on behalf of Vattenfall. You can also view into a draft version of Vattenfall's Class 1 CA PKI Disclosure Statement1 ("PDS") for the Vattenfall Certificates.

Further information

If you have any questions relating to the e-mail encryption system, you can use this link to contact a support team working on our behalf.    


1 You need Adobe Reader to read these documents