hrit.atos.net

- Atos -

Issued by Atos TrustedRoot Server-CA 2019

About this certificate

This digital certificate with serial number 11:42:f2:a7:93:ba:70:6c:f1:3c:3c:a4 was issued on by Atos.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Atos

Organization: Atos
Locality: Bezons
Country: FR

Atos

Organization: Atos
Country: DE

This certificate will expire on

Certificate Details

Serial Number (hex): 11:42:f2:a7:93:ba:70:6c:f1:3c:3c:a4
Serial Number (int): 5342180174997490739938344100
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 72:a1:fd:dc:ad:48:c9:ae:e3:76:0a:28:05:26:32:1a:ab:58:2c:b9
AuthorityKeyId: fb:63:cd:16:21:6a:73:df:5a:ce:f4:2b:a9:fd:aa:26:fe:ab:49:a3

Fingerprint (sha1): e3:75:56:33:53:88:2b:40:73:2c:1b:72:b4:60:8a:b7:4d:5a:a8:d1
Fingerprint (sha256): 00:c2:f7:31:93:da:fb:ba:76:25:3f:b2:b0:95:5c:d0:02:f6:a4:5d:ac:59:69:8d:01:84:23:8e:4c:14:db:b9

Issuing Certificate URL: http://pki.atos.net/Download/AtosTrustedRootServerCA2019.cer

Revocation information

OCSP Server: http://pki-ocsp.atos.net
CRL Distribution Point: http://pki-crl.atos.net/crl/Atos_TrustedRoot_Server_CA_2019.crl

Check the revocation status for certificate hrit.atos.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hrit.atos.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

defthasnzeos3.saacon.net
hrit.atos.net
hrit.myatos.net

Other certificates including the domain name atos.net

(limited to 100 certificates)
*.it.atos.net
liv1-portail.pmu.aw.atos.net
nc1.saas.cloud.atos.net
liv.prg-396-ws-scv-client.aw.atos.net
saml.top.br.atos.net
ctms.it-solutions.atos.net
digitalevents.atos.net
stg-ssl-belux-lsf-renault-admin.aw.atos.net
uc-emea2.myatos.net
ura-eu.it-solutions.atos.net
edf-smartpush.aw.atos.net
rci-lux-ws.aw.atos.net
bpa-eu.atos.net
ssl-prd-bo-bnpp.ewallet.aw.atos.net
inss-mdm.ascs.uk.atos.net
wl-amr-client-acceptance-00020.aw.atos.net
hrit.atos.net
management.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
stg-api-mcdofidelite.mcdo.aw.atos.net
globalsurveys-to.aw.atos.net
*.adminhosting.onprem.mdsp-infra.acc.mspas.atos.net
*.mev.atos.net
e-web.it-solutions.atos.net
bxn.click2procure.atos.net
qlf3-ws-mcdonalds-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
VEES-EMSD-GOV.hk.atos.net
ssl-prd-fo-m2m-oob-saas.sea.aw.atos.net
wes-eviewing.aw.atos.net
events.nl.atos.net
enroll.pki.atos.net
rmttest.cloud.atos.net
awx.develop.dev-bm4gcp.agea.atos.net
ic.es.atos.net
aea.atos.net
enc-prd-paylib-p2p.ewallet.aw.atos.net
echangeqa-na.it-solutions.atos.net
Paylib-PROD-Signing-54251007.ewallet.aw.atos.net
hochtief.it-solutions.atos.net
www.sharepoint.atos.net
mantiscalipso.si.fr.atos.net
amobt-na.it-solutions.atos.net
uniqueid.pre.uid2020.mev.atos.net
portailmen.bs.fr.atos.net
tls-ecc-root-2021-pki-valid.atos.net
portail.pmu.aw.atos.net
apfws.atos.net
public.dev-mbnsei.aw.atos.net
nexus3.ic.es.atos.net
test.atos.net
*.adminhosting.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
tls-ecc-root-2021-pki-valid.atos.net
zsa.egk-tsp.de.atos.net
lab.it-solutions.atos.net
nokia-epm.it-solutions.atos.net
smc-collaboration.atos.net
apps.fi.atos.net
ctms2.it-solutions.atos.net
mta.cpp.a3c.atos.net
xauth-fidm.access.it-solutions.atos.net
sap-web-totalsva-stg.aw.atos.net
ws-tnr-wiremock-stub-server.factory.fr.atos.net
sepaplug-sepamail-ced.aw.atos.net
ura-aa.it-solutions.atos.net
*.servicetrace.it-solutions.atos.net
ssl-tec-client-web-bo-m2m-wallmngt.germany.ewallet.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
mdr-poc.aisaac.atos.net
generic-portal.it-solutions.atos.net
gateway2.es.atos.net
ucloud.atos.net
qlfv2-www.auchandrive-fr.aw.atos.net
letsencrypt.qlf-dpsk.aw.atos.net
serv-handyline.it-solutions.atos.net
*.sdc.atos.net
dataviz.aw.atos.net
atf-srp.it-solutions.atos.net
SIRON-AML.SI.FR.ATOS.NET
mp.it-solutions.atos.net
ssl-prd-fo-mob-oob-saas.sea.aw.atos.net
smartpush-ihm.aw.atos.net
qlf-gpp3-www-geoportail-wp-fr.aw.atos.net
selfhelp-uat.ms.atos.net
bea.it-solutions.atos.net
cert00003-azurecdn.akamaized.net
www.e-travel-counter.it-solutions.atos.net
portal.onprem.mdsp-infra.siemensmac.sg.mdsp.atos.net
www.enduzd.com
liv-txm-h2h.cwi.aw.atos.net
gpp3-edito-geoportail-wp-fr.aw.atos.net
qlfv4-www.auchandrive-fr.aw.atos.net
cert00003-azurecdn.akamaized.net
gitlab.auregis.it-solutions.atos.net
qlf-lsm-mcdonalds-fr.aw.atos.net
netviewervs2.it-solutions.atos.net
cpo-lb.it-solutions.atos.net
obelix.atos.net
qlf3-www-mcdonalds-fr.aw.atos.net
skillbuilder.dcsdev.aws.atos.net
ref-fidm9.access.it-solutions.atos.net

Certificate

The complete raw certificate details for hrit.atos.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5342180174997490739938344100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atos TrustedRoot Server-CA 2019'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 06:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 06:49:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bezons'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hrit.atos.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855120995730199306112476177316737118107708097450137694255077605380631258296834649282368042392972355977414253992628289006630521644978185630568402322351400956423663115786381668462556019974186949233935990198305008665320279695347235309884530971191140000940975150661828394013765517851938253261221987627704165817088353858481696072759279707254043218962682180713387761579622157223390772465209222953948913981217566895846288257943581258603643352602876766886261006243924486441329214785521674767862919377112491296549783851888898358917181818941300904438624221688290108700718094490062938857806491630537310019799337862287447050390156774517625355510548399181734771402028982293426958074321216901753206360371978584002893888214485606721403686589728515237918718032744408275097657092215988663137251279923293710090789517857252521959130886668898541318420962960943211522269224414183690142925435894269514368397081620922281917290396917932364209144002506505773928697822056191734641952121374851522354607381530318139002662017646890168020377017077718705551512351103961930038266093727519077244821762415652354978001634754553376642393223233069562142987517096758452202866631590837610626292285899729518764778330811052804094434408802989022427157438376950313254814060681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fb63cd16216a73df5acef42ba9fdaa26feab49a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.atos.net/Download/AtosTrustedRootServerCA2019.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki-ocsp.atos.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defthasnzeos3.saacon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrit.atos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrit.myatos.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6189.5.1.1.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki.atos.net/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki-crl.atos.net/crl/Atos_TrustedRoot_Server_CA_2019.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72a1fddcad48c9aee3760a280526321aab582cb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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