lagrange.rasec.com

Issued by CLASS 2 KEYNECTIS CA

About this certificate


This digital certificate with serial number 11:27:be:47:34:27:79:d1:01:1c:59:45:28:f2:df:63:71:9d was issued on by KEYNECTIS .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers

RASEC RETAIL

Organization: RASEC RETAIL
Organization unit: Organization Validated SSL certificate
State / Province: CENTRE
Locality: ROMORANTIN LANTHENAY
Country: FR

KEYNECTIS

Organization: KEYNECTIS
State / Province: CENTRE
Locality: ROMORANTIN LANTHENAY
Country: FR

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 11:27:be:47:34:27:79:d1:01:1c:59:45:28:f2:df:63:71:9d
Serial Number (int): 1494432796179929781141164411571405225947549
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 83:96:9f:70:37:90:a0:fb:dd:02:4e:13:35:09:0e:16:a5:09:2a:a6
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 67:b3:ae:bb:88:2e:ad:d9:03:b5:b2:b2:3b:f1:2c:20:25:14:7a:9e
Fingerprint (sha256): f4:24:d8:50:d6:bb:ea:11:d0:f3:59:6f:99:70:54:8e:f7:e4:54:58:8d:0d:07:ea:c4:31:50:87:67:7c:da:9e


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for the current certificate on lagrange.rasec.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: lagrange.rasec.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgISESe+RzQnedEBHFlFKPLfY3GdMA0GCSqGSIb3DQEBCwUA MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM QVNTIDIgS0VZTkVDVElTIENBMB4XDTE1MDMyNjEwMDc1NFoXDTE4MDMyNjA5MDc1 NFowgaIxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZDRU5UUkUxHTAbBgNVBAcMFFJP TU9SQU5USU4gTEFOVEhFTkFZMS8wLQYDVQQLDCZPcmdhbml6YXRpb24gVmFsaWRh dGVkIFNTTCBjZXJ0aWZpY2F0ZTEVMBMGA1UECgwMUkFTRUMgUkVUQUlMMRswGQYD VQQDDBJsYWdyYW5nZS5yYXNlYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCq+xGnC4z8VZlFBhzXKKb++X6SMtkjR3GNiQrua81f6zF5k99c2513 55tzrq5t7rJctJhHYBsVUwjpUwy8dCTNPYRiRfwdnj6Lld4YBwIGvRgot5h8UGWP gmbvHiQ52j9O8QE3DgegZ74Pz09Ko07o6RyVnt0dEE6RtBzNNWH5z82P3H2BU6oQ rVt0+yYFKJdE86EGKYZnayYIdC7bC2q9jUYQtLbgGoTh96ikD87z9yu5sMI7Fite whG87ty4s6+93ttGSzGImNIjAOZiestl18SdoU47xGWNV6FsVfqSSj9xRb7qqpWr uuD0sz1NrtcrYboNnTxWuIXauWQxwpMxAgMBAAGjggF+MIIBejAMBgNVHRMBAf8E AjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwHQYDVR0RBBYwFIISbGFncmFuZ2UucmFzZWMuY29tME8GA1UdHwRIMEYwRKBC oECGPmh0dHA6Ly9jcmwtc3NsLmNlcnRpZmljYXQyLmNvbS9rZXluZWN0aXMvY2xh c3Mya2V5bmVjdGlzY2EuY3JsMEQGCCsGAQUFBwEBBDgwNjA0BggrBgEFBQcwAYYo aHR0cDovL29jc3Atc3NsLmNlcnRpZmljYXQyLmNvbS9zc2wtb2NzcDBFBgNVHSAE PjA8MDoGDCsGAQQBga1aAgUDDjAqMCgGCCsGAQUFBwIBFhxodHRwOi8vd3d3Lm9w ZW50cnVzdC5jb20vUEMvMB0GA1UdDgQWBBSDlp9wN5Cg+90CThM1CQ4WpQkqpjAf BgNVHSMEGDAWgBQAEUHfO507y7iiwTOSqIHM5X3nmTANBgkqhkiG9w0BAQsFAAOC AQEAZZMvcg7GVDuscU1ux9L1gEM2UtV0P5rZz0+vC6yIhYY0R7o7DBkuELihVVuN 88LDRPW06kyhjv6qv1Zf9CEmq3Wmm5PWyW4GEIuJfTI0fEFSnuXvKisuxvnbYGg7 /G3/h4J/ovOEBR3LZ26PwE0sOEh6wutG6NksuVFYorijEuIIBcpRhQnxCuyuNUgX OYRnwyenyzQ7gyYnnj9XI55wyIA/PGTqmuqq+S/q6FhO/wd84OnNhk9hfa/pBOGo wLnktcQxPzg0Njeu/61EKn8Hr1lfjbAyCvZMgdznTX6bC3TSf5PyWQ/IU/x18KP+ 5tXaTjAmhotjdoVogI/u+HZWCw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvsRpwuM/FWZRQYc1yim /vl+kjLZI0dxjYkK7mvNX+sxeZPfXNudd+ebc66ube6yXLSYR2AbFVMI6VMMvHQk zT2EYkX8HZ4+i5XeGAcCBr0YKLeYfFBlj4Jm7x4kOdo/TvEBNw4HoGe+D89PSqNO 6OkclZ7dHRBOkbQczTVh+c/Nj9x9gVOqEK1bdPsmBSiXRPOhBimGZ2smCHQu2wtq vY1GELS24BqE4feopA/O8/crubDCOxYrXsIRvO7cuLOvvd7bRksxiJjSIwDmYnrL ZdfEnaFOO8RljVehbFX6kko/cUW+6qqVq7rg9LM9Ta7XK2G6DZ08VriF2rlkMcKT MQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1494432796179929781141164411571405225947549 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-26 10:07:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-26 09:07:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CENTRE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ROMORANTIN LANTHENAY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RASEC RETAIL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lagrange.rasec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21584318560357014316565454528847263699472089515659651615553411297196534802333359856312529321454840358771585882072883089524881391659082082382821203979737538312210120591192599104252684224088775022925488483554509632031637689990711540902828547327053943412755818374393624762799292469718630442350455294400217232475562958032725734202735876002799479939732250046692540116827075300819877526290347399874954160140411888813245664323152250451438314721321131928389221209328860791849101398510060133097146693023684871413607611372472270956888115450134850602149952386286055614988491532635764205284329453252719035536325119627556420752177 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrange.rasec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.3.14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83969f703790a0fbdd024e1335090e16a5092aa6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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