facility-insights.assessment.schneider-electric.com

- Schneider Electric Industries SAS -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 25:c4:6e:2f:c7:ef:bf:75:d2:31:e4:1e:24:52:b3:6a was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
Organization unit: Partner Business
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:c4:6e:2f:c7:ef:bf:75:d2:31:e4:1e:24:52:b3:6a
Serial Number (int): 50201360878972107737552327220279817066
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 55:89:19:69:b3:07:ac:b8:ff:a2:11:94:8b:1d:17:8a:3c:8f:49:d7
Fingerprint (sha256): 03:1e:4d:72:08:fd:6a:15:d7:a9:f2:44:9d:8e:a3:62:f7:fc:97:15:de:db:77:8c:cc:84:62:96:ad:46:85:2a

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate facility-insights.assessment.schneider-electric.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for facility-insights.assessment.schneider-electric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

facility-insights.assessment.schneider-electric.com

Other certificates including the domain name schneider-electric.com

(limited to 100 certificates)
bigoudi.fr.schneider-electric.com
2020.pasupport.schneider-electric.com
qa-downloads.schneider-electric.com
plcupload.schneider-electric.com
subscriptions.schneider-electric.com
identity-pprd.schneider-electric.com
rexel.mie3c.schneider-electric.com
ecoxpert.schneider-electric.com
mel.vpn.ems.schneider-electric.com
www.quantil.com
support5.cdnetworks.net
ib2diag.schneider-electric.com
secure08.lithium.com
support5.cdnetworks.net
spiceportal.schneider-electric.com
tango.us.schneider-electric.com
*.struxureware.schneider-electric.com
secure08.lithium.com
nsi.us.schneider-electric.com
www.bem.schneider-electric.com
www.appgate.schneider-electric.com
lamtraveler01.schneider-electric.com
dalton.tr.schneider-electric.com
devportalint-test.schneider-electric.com
consulting.schneider-electric.com
conextpowercloud.schneider-electric.com
*.dev.schneider-electric.com
support5.cdnetworks.net
supportmsi.schneider-electric.com
vfast-portal.schneider-electric.com
hca.pme-central.schneider-electric.com
www.wesop.schneider-electric.com
identity-pprd.schneider-electric.com
nsi.jp.schneider-electric.com
support5.cdnetworks.net
ping-access.schneider-electric.com
www.schneider-electric.com
sip-res.schneider-electric.com
secure08.lithium.com
mam.schneider-electric.com
appserver.leetechnologies.com
www.wesop.schneider-electric.com
support5.cdnetworks.net
aliases2.schneider-electric.com
facilityexpert-us.schneider-electric.com
p7vci.eud.schneider-electric.com
xsl.schneider-electric.com
vendor-uk.schneider-electric.com
dcimassets.schneider-electric.com
akamaisecure2.qualtrics.com
lamtraveler01.schneider-electric.com
support5.cdnetworks.net
gtp-pp.schneider-electric.com
aliases6.schneider-electric.com
motion.schneider-electric.com
onlinekatalog.schneider-electric.com
webexperience.schneider-electric.com
onewo.eud.schneider-electric.com
psr.fr.schneider-electric.com
*.buildings.schneider-electric.com
app.ppr.schneider-electric.com
*.fi.schneider-electric.com
ezlist.schneider-electric.com
facilityinsights-us.schneider-electric.com
*.raproxy.dsp.schneider-electric.com
isel-sqe.dev.schneider-electric.com
intranet-maison.schneider-electric.com
facility-insights.assessment.schneider-electric.com
www.quantil.com
mysecn-pp.dev.schneider-electric.com
www.bem.schneider-electric.com
www.schneider-electric.com
stage-systemplatform.marketplace.software.schneider-electric.com
trm.fr.schneider-electric.com
ping-access.schneider-electric.com
www.schneider-electric.com
conextpowercloud.schneider-electric.com
es-training-courses.schneider-electric.com
seifoundation.schneider-electric.com
bigoudi.fr.schneider-electric.com
echange-uat.cn.schneider-electric.com
mft.schneider-electric.com
smsurvey-ksa.schneider-electric.com
stage.teamforge.schneider-electric.com
www.appgate.schneider-electric.com
e-mail-internal-northamerica.schneider-electric.com
support5.cdnetworks.net
schneider-electric.com
www.schneider-electric.com
hca.pme-mountain.schneider-electric.com
mft.schneider-electric.com
facilityinsights-preprod.schneider-electric.com
jira.au.schneider-electric.com
vfast-pp.schneider-electric.com
secure0079.hubspot.com
services.modicon.com
www.schneider-electric.com
vmanage-emea.schneider-electric.com
support5.cdnetworks.net
popeye.ae.schneider-electric.com

Certificate

The complete raw certificate details for facility-insights.assessment.schneider-electric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwupEk9R+2crRCqjn8EM3
94OLu2lD0p8RbAoVM5txkUK+NtMlaEmBWK6oUYae/3ZH69PlTffq2W5YCM0YH/sd
lM7lAhlUg8biojLNKmIyapMyKEJ8Gh6y7gqBP+97QC4PpkfJRRuKAzcHCZJtHsY1
OsAFSIdLMmdNw2xvhGlJ5L9NWlZkdhvfZSaC9J2LOu7rVWhSJl7RM14HQFHB3i1a
Fub6Yv0Pip3VUUqQ744GYHKdbVY/wqgMIAbgd9jzYF6kXqBF+AiRJXlnNP2Er2l3
auKSyEh/YauQ0BHg3MCYcRJYVEZe9Dh3+DgD50xx1KFa40LRrdifGosWhEUfRE7s
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50201360878972107737552327220279817066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Partner Business'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'facility-insights.assessment.schneider-electric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24605752960948702176892496842372368572816389311733360236438761473406110367594645738649556402295439748951688446123267273928661668572175692394093252630968357083878411688131159880333999843295134660900932740561519641758759195285698419218716950897577985643076317130485951325613723409678202285783371018269252799004960117763081940222499670129450022658810173215904977979242545765527450581598597479344667827774300508806021114920736338083508128246671449246093662892404826543797378724018361621865529539683458432068782612226161594913889285898169424119645466388216603035187823726033412180595129630054457459627682993139941192428767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facility-insights.assessment.schneider-electric.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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