noefy8jc.noe.edf.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:cb:1a:ff:dd:55:17:14:06:1a:5a:0a:77:c9:83:d7:91 was issued on by KEYNECTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:cb:1a:ff:dd:55:17:14:06:1a:5a:0a:77:c9:83:d7:91
Serial Number (int): 1492408152420728029087132419360017642411921
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 78:b6:3d:5a:ab:84:0a:6b:73:bc:5e:55:62:04:34:31:b3:77:35:05
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): ca:8e:04:7b:8b:8e:a7:ba:8b:fb:49:fa:6e:27:b3:a7:f0:91:d9:2e
Fingerprint (sha256): 03:82:f6:0f:2d:2d:03:5a:bf:f2:50:0a:b5:65:9e:fd:27:a8:d7:16:26:11:8c:34:58:86:2e:3d:fb:28:ed:31


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate noefy8jc.noe.edf.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for noefy8jc.noe.edf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

noefy8jc.noe.edf.fr
mypgi-recette.edf.fr

Other certificates including the domain name edf.fr

(limited to 100 certificates)
mypgi-recette.edf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
VDI1380023.atlas.edf.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
monagencepart.edf.fr
zep304di.distribution.edf.fr
pwa-sso-rbb.edf.fr
portail-osr-prestataires.enedis.fr
sso.edf.fr
zer331b7.distribution.edf.fr
ldap-part-interne-a-rbb.edf.fr
pblock-dev.edf.fr
ldap-part-interne-a-perf.edf.fr
publish-rcc-siterc.cie.edf.fr
commerce-ottawa-rbb.edf.fr
pcyintplypdi001.neoprod.edf.fr
emm-iq.edf.fr
test-websso-gardian.edf.fr
paas-pp.edf.fr
services-mobiles-iq.edf.fr
distri-vermeer.edf.fr
bo-preprod-travaux.cie.edf.fr
int-myaccess.edf.fr
sei-raccordement.edf.fr
one-module.edf.fr
websso-gardian.myelectricnetwork.com
odicee.edf.fr
portail-osr-prestataires.enedis.fr
preiq-websso-gardian.edf.fr
iceua.edf.fr
intranetetendu.edf.fr
acces-1.a2i.edf.fr
appli-ssa-qual-fhm.edf.fr
publish-rf2-siterc.cie.edf.fr
mypaas-r7.edf.fr
ELECTRICITE DE FRANCE
hydrovigie-int.edf.fr
*.usine-stg2.edf.fr
hydro-doctopus-rec.edf.fr
prod-sdin-passerelle-partenaire.edf.fr
paas-data-r7.edf.fr
icesb.edf.fr
mrbot-edf-entreprises-prd.edf.fr
pcydmzplywfe001.intranet.edf.com
opendata-martinique.edf.fr
noefy8jc.noe.edf.fr
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
appli-ssa-prod-web2.edf.fr
icecp.edf.fr
equilibre.corse.edf.fr
eboard-recette-r1.edf.fr
pwb-sso.edf.fr
opendata-guadeloupe.edf.fr
collab.intranet.enedis.fr
opendata-reunion.edf.fr
si-devops-repository.edf.fr
sso-perf.edf.fr
noea06te.noe.edf.fr
remit.cie.edf.fr
rh-olimp-distributeur.edf.fr
owapcy.extranet.edf.fr
iceua.edf.fr
projet-piscine.edf.fr
no2fyb45.noe.edf.fr
autoconsommation.dn.edf.fr
travaux.edf.fr
partenaires.edf.fr
eboard-recette-r2.edf.fr
commerce-smoothie.edf.fr
ldap-part-b-perf.edf.fr
vote-pulse.cie.edf.fr
portail-osr-prestataires-rec1.enedis.fr
emm-iq.edf.fr
immoconforme.edf.fr
proto-b-prod.edf.fr
rh-gama.edf.fr
itzmirecette.edf.fr
partenaires.edf.fr
pcyintpirgw001-mopieurs.edf.fr
panel-particuliers.dn.edf.fr
eboard.edf.fr
www.paiement-particulier.edf.fr
edfrecrute.edf.fr
edf.fr
iasvi-recette.edf.fr
opendata-guadeloupe.edf.fr
prod.sfdb.edf.fr
noeintplypfe002.neoprod.edf.fr
owa.extranet.ppmccu.fr
opendata-corse.edf.fr
pc2fy72t.pcy.edf.fr
zep3321n.distribution.edf.fr
api-r7.edf.fr
opendata-reunion.edf.fr
mrbot-edf-entreprises-prd.edf.fr
publish-pp2-siterc.cie.edf.fr
dbi-dev.edf.fr
noedmzplywdi001.intranet.edf.com
pilotimmo.edf.fr

Certificate

The complete raw certificate details for noefy8jc.noe.edf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQDF44pPUGMCogAF6g4Q
oh5FgXVjwBJlVVHggmSFecc3exG8Jj8kDMWDJwUBTGlLtGrUzyK8QIWJTGslg/nn
yQnTcZbqwA3QtYuw6XkO/OHIgCvLC5rIW7SzwjeZZJyvv4pzWmn8M7LFbEi62hON
rhYhsJa9pYBonN1D710C+1rlqx2X0Gf1hRrWU81DEbyXnpep69t4AFolXNiP6MAi
u2iOqFWmDLUaXYKO19CjVC15xfJro7i5EsTGn3IWSzpXLFVsgVW8dtAnVKSbXRYJ
67TcKhgWmA90kqI2LXNOl1n84plnEWqWPvyxkvjbeo1GteUbSdNz9wUzOH51U1sE
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492408152420728029087132419360017642411921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 09:47:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 09:47:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'noefy8jc.noe.edf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23859420820689094359776718457778574391702301513984421880809023377050885796110446963066071090854183177191289588949523547638211312617987222906640297958069381896872365975565195814695310514604588667293633868000978109254116373561927672850776322906856553279090829329035716726824138469981887120733134559279141208685126352313297367994681111719556742858837887501195481582065517546070071457281632692320752852382789753351328897894831346147336473848741873421609452568531548723644325756963840132072393913226903554218028736350496321065004152702061460213558886171691019135590830189914968890108430524674757893331887162037280658097391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noefy8jc.noe.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypgi-recette.edf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78b63d5aab840a6b73bc5e5562043431b3773505
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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