espace-client-collectivites.enedis.fr

- ENEDIS -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:f3:2f:a4:2a:49:8b:73:d9:70:d1:69:4b:40:0f:45:75 was issued on by KEYNECTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ENEDIS

Organization: ENEDIS
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:f3:2f:a4:2a:49:8b:73:d9:70:d1:69:4b:40:0f:45:75
Serial Number (int): 1492461428718908766798873974355607925245301
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 3e:02:bf:73:9a:52:eb:01:71:9b:f7:b2:b4:1e:71:4e:6c:f4:ce:b8
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): b8:92:7d:46:75:99:54:84:a7:b9:8e:09:e0:dd:e7:46:4f:a3:8d:d7
Fingerprint (sha256): 00:a3:8a:a1:b7:f4:6b:f3:6f:9d:63:e0:f6:37:ed:6c:94:21:fe:5e:83:ce:c3:b0:c5:fd:ba:b1:30:a3:1c:bb


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate espace-client-collectivites.enedis.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espace-client-collectivites.enedis.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espace-client-collectivites.enedis.fr
espace-client-collectivites.erdf.fr

Other certificates including the domain name enedis.fr

(limited to 100 certificates)
e-stock.enedis.fr
sikapa-iq.enedis.fr
ie-saas-test.enedis.fr
sge-perfi.enedis.fr
restheart.tmm.snatpool.f5ie.prd.lbp.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
espace-client-particuliers-rec-dmz.enedis.fr
intrapreneur.enedis.fr
infops.enedis.fr
zep304dg.enedis.fr
espace-client-collectivites.enedis.fr
startmeup.enedis.fr
deck-recette.enedis.fr
gate3196.enedis.fr
portail-osr-prestataires.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
pcyintplypdi001.neoprod.edf.fr
ws.inforeseau.api.enedis.fr
espace-client-connexion-pprod.erdf.fr
int-myaccess.edf.fr
gate3360.enedis.fr
portail-osr-prestataires.enedis.fr
mooc.enedis.fr
microapps.enedis.fr
herakles.enedis.fr
zec304dk.enedis.fr
data.enedis.fr
api.public.cinke-evolution.perf.enedis.fr
archivage-disco.enedis.fr
pcydmzplywfe001.intranet.edf.com
board.qual.linky.enedis.fr
mooc.enedis.fr
noeintplypfe001.neoprod.edf.fr
laruche.enedis.fr
api-lincs-qualif.enedis.fr
meciteasy.enedis.fr
zhb-rest.tmm.f5ie.prd.lbp.enedis.fr
gw.hprd.api.enedis.fr
geosite.enedis.fr
sge-b2b.enedis.fr
sge-b2b.enedis.fr
collab.intranet.enedis.fr
gw.prd.b2b.enedis.fr
mooc.enedis.fr
ie-saas-test-ri.enedis.fr
espace-client-entreprises-pprod.enedis.fr
portail-osr-prestataires-rec1.enedis.fr
dataposte-sei.enedis.fr
moncompte-qualif-legacy.enedis.fr
datahub.enedis.fr
espace-client-particuliers.enedis.fr
bali.enedis.fr
alexv2-apipra-pprod.enedis.fr
zep3322a.enedis.fr
noeintplypfe002.neoprod.edf.fr
iq-caraibe.enedis.fr
alexv2api-prdn-pjv-02.enedis.fr
data.enedis.fr
noedmzplywdi001.intranet.edf.com
espace-client-particuliers-pprod.enedis.fr
egmaops.enedis.fr
distri-raccordement-mco.enedis.fr
intq.ecoflot.enedis.fr
prd.apigo.enedis.fr
data.enedis.fr
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
ecoflot.enedis.fr
alexv2api-recd-izi-01.enedis.fr
datahub.enedis.fr
moncompte-qualif.enedis.fr
moncompte.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
brandcenter.enedis.fr
lincs-live-admin.enedis.fr
appamiante.enedis.fr
espace-client-collectivites-rec-dmz.enedis.fr
fournisseursdenedis.enedis.fr
facile-commune.enedis.fr
pp-smartpush.edf.fr
accueil-operateur.enedis.fr
smartgrid-solenn.enedis.fr
noeplyaccess01.edf.fr
times-services.enedis.fr
elan-service-iq.enedis.fr
apigile.prod.enedis.fr
deploisat.form.linky.enedis.fr
espace-client.enedis.fr
pki.microapplications.enedis.fr
posteclean.enedis.fr
agir.oi.enedis.fr
myaccess.myelectricnetwork.com
gw.prd.tmm.enedis.fr
arcam.enedis.fr
infoflex-partner-gateway-rec.enedis.fr
noedmzplywdi001.intranet.edf.com
moncompte.enedis.fr
ws.sikapa-RCC.enedis.fr

Certificate

The complete raw certificate details for espace-client-collectivites.enedis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOiboe6pk3I3DB2FuSlB
qN+Sp80q4oAvnhj/3UXaXmWEQN1Z4bBq2Xu2Ax9PZuP++IDEvmMsnCzAnP0rsbjy
fet2LGu/lComAXbqzBaYzP6pGmXlbjXBx5ATRMjxTipOj7tsGhRhcYNOlL4SAC6m
PUK7+7jeVuzCQAbx2l8I4Xzb4+gy2eaTQ1gNAFJ7ZOBeNAkbGrpOKQxkupVvGMcj
sMriFhuVFdsmXphKxZy0bUSZrX3DCvEpH2QPh3cCrUezesCjHliR/ADNmuyNLYKr
JY4IVBkZHQxbfP2MGYrIkuNEhMEuVAPkKG7SFzrwAH4rbVMNiLX51v/RLVa+K9q/
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492461428718908766798873974355607925245301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 08:34:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-16 08:34:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ENEDIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espace-client-collectivites.enedis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21322738484383218775184183808888400364635250426227958318044540561520925074595635366035401326194925212994579777509550555187361622786111801288134495444406367888119479949024366852255870799447256496368605857442969610479383561826585462142368804390054728616464365257350416914031781344945012345828996687970033365459347764542478926387383705132982544869063125000382650122026814879877838185867653172671747301225517355575933247997349263387149021192211384448870151682233511855759146291350432465370891177883342304212694004192134799361536144624996376666066475329062141604260096711043511706934412123614424290338335517964474800324581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-collectivites.enedis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-collectivites.erdf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e02bf739a52eb01719bf7b2b41e714e6cf4ceb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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