dsirev-sep.applis.toulouse.fr

- COMMUNE DE TOULOUSE -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 58:e2:5d:d2:6c:a6:89:88:90:ab:3f:ee:22:3a:85:99 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

COMMUNE DE TOULOUSE

Organization: COMMUNE DE TOULOUSE
Organization unit: MAIRIE
State / Province: Haute-Garonne
Locality: TOULOUSE
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:e2:5d:d2:6c:a6:89:88:90:ab:3f:ee:22:3a:85:99
Serial Number (int): 118147425654734447690594374299332281753
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): b2:9d:4e:ad:9c:71:52:10:59:0d:62:a0:20:de:4e:4a:23:28:3b:9c
Fingerprint (sha256): 00:79:25:f5:97:18:e0:91:a8:05:e5:c4:5c:8d:19:8b:20:36:9f:f9:3d:da:32:ef:d9:3f:a5:b9:f6:57:b7:be

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate dsirev-sep.applis.toulouse.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsirev-sep.applis.toulouse.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsirev-sep.applis.toulouse.fr

Other certificates including the domain name toulouse.fr

(limited to 100 certificates)
dsirev-sep.applis.toulouse.fr
cast.extranet.toulouse.fr
api-culture.toulouse.fr
cast.extranet.toulouse.fr
onct.toulouse.fr
oxyadpermi.integration.toulouse.fr
saintraymond.toulouse.fr
axelws.applis.toulouse.fr
saintraymond.toulouse.fr
tms.opacweb.fr
villachiragan.saintraymond.toulouse.fr
*.plan.toulouse.fr
axelnet.applis.toulouse.fr
depotfichier.extranet.toulouse.fr
crr-enseignants.extranet.toulouse.fr
saintraymond.toulouse.fr
depotfichier.extranet.toulouse.fr
*.plan.toulouse.fr
saintraymond.toulouse.fr
archives.toulouse.fr
vaxi.toulouse.fr
tms.opacweb.fr
documents.toulouse.fr
conservatoirerayonnementregional.toulouse.fr
api-culture.toulouse.fr
internet-collectivites.toulouse.fr
billetterie.musee-saint-raymond.toulouse.fr
rosalis.bibliotheque.toulouse.fr
documents.presse.toulouse.fr
urban-hist.toulouse.fr
urban-hist.toulouse.fr
api-culture.toulouse.fr
cas.toulouse.fr
wifi.toulouse.fr
*.integration.toulouse.fr
saintraymond.toulouse.fr
urban-hist-gestion.toulouse.fr
voeux2019.toulouse.fr
oxyadpermi.extranet.toulouse.fr
rio-loco.org
toulouse.fr
tms.opacweb.fr
messagerie.toulouse.fr
vaxi.toulouse.fr
internet-collectivites.toulouse.fr
saintraymond.toulouse.fr
agendarencontres.applis.toulouse.fr
etatcivil.toulouse.fr
tms.opacweb.fr
oxyadpermi.integration.toulouse.fr
toulouse.fr
resultats.elections.toulouse.fr
crr-enseignants.extranet.toulouse.fr
cas.toulouse.fr
vaxi.toulouse.fr
axelnet.applis.toulouse.fr
retraitfichier.extranet.toulouse.fr
tms.opacweb.fr
urban-hist-gestion.toulouse.fr
toulouse-metropole.fr
sesame.extranet.toulouse.fr
archives.toulouse.fr
saintraymond.toulouse.fr
documents.presse.toulouse.fr
resultats.elections.toulouse.fr
messagerie.integration.toulouse.fr
saintraymond.toulouse.fr
*.integration.toulouse.fr
deliberations.toulouse.fr
5ansdeprogres.toulouse.fr
dessinemoitoulouse.fr
rosalis.bibliotheque.toulouse.fr
changemdp.extranet.toulouse.fr
retraitfichier.extranet.toulouse.fr
etatcivil.toulouse.fr
onct.toulouse.fr
voeux2019.toulouse.fr
saintraymond.toulouse.fr
voeux2019.toulouse.fr
rosalis.bibliotheque.toulouse.fr
axelnet.applis.toulouse.fr
chamois.toulouse.fr
oxyadpermi.integration.toulouse.fr
tms.opacweb.fr
*.integration.toulouse.fr
archives.toulouse.fr
5ansdeprogres.toulouse.fr
rdvenligne.toulouse.fr
extranet.museum.toulouse.fr
resultats.elections.toulouse.fr
archives.toulouse.fr
elections.applis.toulouse.fr
urban-hist.toulouse.fr
changemdp.extranet.toulouse.fr
retraitfichier.extranet.toulouse.fr
billetterie.julesjulien.toulouse.fr
authsso.extranet.toulouse.fr
urban-hist-gestion.toulouse.fr
jeparticipe.metropole.toulouse.fr
toulouse.fr

Certificate

The complete raw certificate details for dsirev-sep.applis.toulouse.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LppN0v3ZThWiu+cNv+u
4en1Z9JHT2ChAQxsVQNnSlPnbSOYNYAzBoLGA1wStWoElUMXOIL72Lf9y4CpJQcM
WuPlusxdkM3CyN37qRQO9S6qV1EUBJS3nPAAS3L9q3MxSvoKfcZDDE0VeTPBnde1
OZNd2ljL5Bepc/Zm3pmQEjf8tT8BgJGVHQqEP4r6Lm76XsYNQ4yVnBE2nOqVxdsP
yl/8EpzZDoLDkSn+W2JPorxFV5uOcrkDXouAyQb4ZJ/rlWVTPse41kvVAbnqcK9X
4m8X47Cyy5XFV6LG5aeR4utuWiF0H4r34w6gUEYg9K18q8kQ+URdT/e/ydE/GfHg
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118147425654734447690594374299332281753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haute-Garonne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'TOULOUSE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'COMMUNE DE TOULOUSE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MAIRIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'dsirev-sep.applis.toulouse.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30894069101829477697240671472944773248562782721403159672252019165411811338722592657844468481927198802893253050944167266539737869611584620460621470192322047695588991649234200158092037440837979969292905349292461958115541393358080016515405794093917990963856135896387625991092100908209747891971019151610637225556100600483285674539130612596555602600587109691602520109623152257857677689820367259113846707261935390634555923280527858901709152089223800651916829079398129035856961959112910577317400856515586926959768383292231837123971940020398634823461808984212611849828321893560471741521750036669579571044215137492430889279657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsirev-sep.applis.toulouse.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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