www.reseau.peugeot.fr

- AUTOMOBILES PEUGEOT -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 06:5e:6d:ff:6f:b6:d0:44:f4:81:a1:be:b0:3d:66:53 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

AUTOMOBILES PEUGEOT

Organization: AUTOMOBILES PEUGEOT
State / Province: PARIS
Locality: PARIS
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:5e:6d:ff:6f:b6:d0:44:f4:81:a1:be:b0:3d:66:53
Serial Number (int): 8465674899813852317551745715050210899
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): bb:21:3c:93:85:de:5e:44:89:f0:c7:ed:55:1a:e3:b5:31:88:25:f9
Fingerprint (sha256): 00:9b:99:1d:70:dc:0f:9f:e9:0c:12:ce:b5:99:d3:45:cf:f5:67:fc:f5:d4:96:c4:f9:c1:9b:82:b9:23:67:0b

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate www.reseau.peugeot.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.reseau.peugeot.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.reseau.peugeot.fr

Other certificates including the domain name peugeot.fr

(limited to 100 certificates)
dev.services-store.peugeot.com
fix.services-store.peugeot.fr
www.reseau.peugeot.fr
inf-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
form.peugeot.fr
uat.test.sams.dsautomobiles.fr
cycles.peugeot.com
uat.admin.sams.dsautomobiles.fr
inf.services-store.dsautomobiles.com
offres.peugeot.fr
pat.services-store.dsautomobiles.com
cycles.peugeot.fr
fix.services-store.peugeot.fr
pat-admin.services-store.peugeot.com
pat-admin.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.peugeot.com
inf.services-store.dsautomobiles.com
ppr-admin.services-store.peugeot.com
uat.test.sams.dsautomobiles.fr
dev.admin.sams.dsautomobiles.fr
trn-admin.services-store.dsautomobiles.com
uat.test.sams.dsautomobiles.fr
pat.services-store.dsautomobiles.com
uat.test.sams.peugeot.fr
new208booking.peugeot.fr
pat.services-store.dsautomobiles.com
new208booking.peugeot.fr
pat-admin.services-store.peugeot.com
ppr-admin.services-store.dsautomobiles.com
pat.services-store.peugeot.com
pat.services-store.dsautomobiles.com
cartographie.peugeot.fr
lesalon.peugeot.fr
trn.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
*.peugeot.fr
dev.services-store.dsautomobiles.com
*.peugeot.fr
dev-admin.services-store.dsautomobiles.com
fix.services-store.peugeot.com
pat-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
services-store.peugeot.fr
www.peugeot.fr
pat.sams.dsautomobiles.fr
dev.services-store.peugeot.com
fix.services-store.peugeot.fr
peugeot.fr
ppr.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
inf-admin.services-store.peugeot.com
inf-admin.services-store.peugeot.com
inf.services-store.peugeot.com
new208booking.peugeot.fr
pat-admin.services-store.dsautomobiles.com
*.peugeot.fr
services-store.peugeot.com
inf.services-store.peugeot.com
uat.services-store.peugeot.com
reservation-nouvelle508.peugeot.fr
services-store.peugeot.fr
new208booking.peugeot.fr
store.peugeot.fr
ppr-admin.services-store.peugeot.com
trn.services-store.dsautomobiles.com
dev-admin.services-store.peugeot.com
fix-admin.services-store.peugeot.com
pat.services-store.peugeot.com
uat.services-store.peugeot.com
uat.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
ppr-admin.services-store.peugeot.com
dev-admin.services-store.peugeot.com
trn-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
admin.services-store.peugeot.com
admin.services-store.peugeot.fr
pat-admin.services-store.peugeot.com
dev.services-store.dsautomobiles.com
pat.services-store.peugeot.com
offres.peugeot.fr
uat.services-store.peugeot.com
boutique.peugeot.de
trn.sams.dsautomobiles.fr
prd-admin.services-store.peugeot.com
admin.services-store.peugeot.fr
uat.services-store.peugeot.com
fix-admin.services-store.peugeot.com
services-store.peugeot.fr
offres.peugeot.fr
admin.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
media.peugeot.fr
uat-admin.services-store.peugeot.com
certificat.peugeot.fr

Certificate

The complete raw certificate details for www.reseau.peugeot.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDK/SHcAuqcwKZ6yyYf8
0wLm5dvowaOWjQp8geDa62xEZfZKK5B1n10ITkvjA83JonYUmHzk8AdoqOCeuKPe
wy03Juk3rfK3rL2xvahEvSrDvNGfJumyfBADNv7n8+cy6Cu+00SUG/HmfbPEDB/Z
tpQ5/7ommkxmPFIfgN3T0VRmN+fNmBoIuHPOPqO2YIVP/7zB+337mIVQVmINObUL
DZIadPRi2D2JX1Cx2wE1yOFCpLCiYzA7L9BlWMHbjtXuzYJzfck/tWfKTqH2X4Ij
UBp1+fk5qoFKHS5Klfv6JVSBD4DtFqK4pTzx8GZul6t82E64Dse1kK+3bxoxsofX
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8465674899813852317551745715050210899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'AUTOMOBILES PEUGEOT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.reseau.peugeot.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21233059611030725460397263625263388240052038674054937441563366250638877747135840362382254774793988411541915423224652834471203860140739958819382381813978565571966743557180638765712613939544443429335071174858336661658172257756559658490104367332073644610968069635129689667828430430699159314181412553322181407919437401890239207719886351699087262720892064189795929111017245436073721315109477944306692501489036701008040703295042550645312278605677644686665514852424021332790314742547253968457933947638918191946310678688718324677407871886717173853243631523351282244065510486913577913882030633385028655858563687418379972892557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reseau.peugeot.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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