publish-rf2-siterc.cie.edf.fr

- Electricite de France -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:6d:f5:16:8d:43:36:29:2f:0b:fd:cc:2f:f2:84:c7:93 was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Electricite de France

Organization: Electricite de France
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:6d:f5:16:8d:43:36:29:2f:0b:fd:cc:2f:f2:84:c7:93
Serial Number (int): 1492284337369991042316798355606913675478931
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 27:c2:c1:f1:f5:ec:cc:e4:4a:9f:97:fb:86:32:15:1d:f1:bf:82:1a
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): c8:29:49:e1:71:0e:b4:af:87:a8:da:ef:fc:f5:b5:0c:93:8d:8f:37
Fingerprint (sha256): 02:3f:03:fc:1a:a6:d9:c6:d5:4a:3c:3f:bf:59:e7:07:1b:df:b9:e6:d2:db:0f:c1:2e:8e:90:be:c8:62:1e:a5


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate publish-rf2-siterc.cie.edf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for publish-rf2-siterc.cie.edf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

publish-rf2-siterc.cie.edf.fr

Other certificates including the domain name edf.fr

(limited to 100 certificates)
mypgi-recette.edf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
VDI1380023.atlas.edf.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
monagencepart.edf.fr
zep304di.distribution.edf.fr
pwa-sso-rbb.edf.fr
portail-osr-prestataires.enedis.fr
sso.edf.fr
zer331b7.distribution.edf.fr
ldap-part-interne-a-rbb.edf.fr
pblock-dev.edf.fr
ldap-part-interne-a-perf.edf.fr
publish-rcc-siterc.cie.edf.fr
commerce-ottawa-rbb.edf.fr
pcyintplypdi001.neoprod.edf.fr
emm-iq.edf.fr
test-websso-gardian.edf.fr
paas-pp.edf.fr
services-mobiles-iq.edf.fr
distri-vermeer.edf.fr
bo-preprod-travaux.cie.edf.fr
int-myaccess.edf.fr
sei-raccordement.edf.fr
one-module.edf.fr
websso-gardian.myelectricnetwork.com
odicee.edf.fr
portail-osr-prestataires.enedis.fr
preiq-websso-gardian.edf.fr
iceua.edf.fr
intranetetendu.edf.fr
acces-1.a2i.edf.fr
appli-ssa-qual-fhm.edf.fr
publish-rf2-siterc.cie.edf.fr
mypaas-r7.edf.fr
ELECTRICITE DE FRANCE
hydrovigie-int.edf.fr
*.usine-stg2.edf.fr
hydro-doctopus-rec.edf.fr
prod-sdin-passerelle-partenaire.edf.fr
paas-data-r7.edf.fr
icesb.edf.fr
mrbot-edf-entreprises-prd.edf.fr
pcydmzplywfe001.intranet.edf.com
opendata-martinique.edf.fr
noefy8jc.noe.edf.fr
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
appli-ssa-prod-web2.edf.fr
icecp.edf.fr
equilibre.corse.edf.fr
eboard-recette-r1.edf.fr
pwb-sso.edf.fr
opendata-guadeloupe.edf.fr
collab.intranet.enedis.fr
opendata-reunion.edf.fr
si-devops-repository.edf.fr
sso-perf.edf.fr
noea06te.noe.edf.fr
remit.cie.edf.fr
rh-olimp-distributeur.edf.fr
owapcy.extranet.edf.fr
iceua.edf.fr
projet-piscine.edf.fr
no2fyb45.noe.edf.fr
autoconsommation.dn.edf.fr
travaux.edf.fr
partenaires.edf.fr
eboard-recette-r2.edf.fr
commerce-smoothie.edf.fr
ldap-part-b-perf.edf.fr
vote-pulse.cie.edf.fr
portail-osr-prestataires-rec1.enedis.fr
emm-iq.edf.fr
immoconforme.edf.fr
proto-b-prod.edf.fr
rh-gama.edf.fr
itzmirecette.edf.fr
partenaires.edf.fr
pcyintpirgw001-mopieurs.edf.fr
panel-particuliers.dn.edf.fr
eboard.edf.fr
www.paiement-particulier.edf.fr
edfrecrute.edf.fr
edf.fr
iasvi-recette.edf.fr
opendata-guadeloupe.edf.fr
prod.sfdb.edf.fr
noeintplypfe002.neoprod.edf.fr
owa.extranet.ppmccu.fr
opendata-corse.edf.fr
pc2fy72t.pcy.edf.fr
zep3321n.distribution.edf.fr
api-r7.edf.fr
opendata-reunion.edf.fr
mrbot-edf-entreprises-prd.edf.fr
publish-pp2-siterc.cie.edf.fr
dbi-dev.edf.fr
noedmzplywdi001.intranet.edf.com
pilotimmo.edf.fr

Certificate

The complete raw certificate details for publish-rf2-siterc.cie.edf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N7GAlkHYTeTwZwiaTuu
2Og1ut92Z9iXhSPb2r4nvlME1l1s+xq2+6heE+8r0zp5u1AwNPJAB5WH7TcR1P6e
C0qPE07YrS7EwWU4p21bDKKZA0LSNJTBpllP3AiAeVYw4iuzO0VAOjMNyOOW7zPn
islNfw0yL93Vkm5pwzFpkAzzpD9+WIGQIB7wUqbmt9GT5P1d6ayMbYWrkZQ9y/2e
ekrGPRbzs5cvCicZYKsVwl1lUGNpidExFvNW7Vy1B9kkyzZJioQol1r1DUclYnQF
7azF7YUoyg89OFQEznLfHFnVLKpcNY3joFqdhJyAMUzkn6gZW39uJ6tvK5J9yuvo
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492284337369991042316798355606913675478931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 10:30:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-02 10:30:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Electricite de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'publish-rf2-siterc.cie.edf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26367421126939557068461597596205188976048541555533713095061002382599753735592979963919411839558966682468602332012149260188424264681978380984107554574341909489591232307443324442796814234283894115597741119856534636187096844163894111199920633463271516078321409750538851894719809535338200555411817020571522843672700501118957028799425778067581511495646501282040578101493186980101255120695975891199893870849328966142045989633665485963538781464739535481021182681296157382644444665223398341580123810249349486923901084605827959304196745565650795850568131779663397207459425502030150678013160353081803430201783717380813786704003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish-rf2-siterc.cie.edf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27c2c1f1f5eccce44a9f97fb8632151df1bf821a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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