mm-ds-stage2.sfr.fr

- SOCIETE FRANCAISE DU RADIOTELEPHONE - SFR SA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0d:a8:1c:a8:dd:af:8f:da:0d:55:e2:af:31:b9:33:c2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOCIETE FRANCAISE DU RADIOTELEPHONE - SFR SA

Organization: SOCIETE FRANCAISE DU RADIOTELEPHONE - SFR SA
Organization unit: SFR DTAM
State / Province: Île-de-France
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a8:1c:a8:dd:af:8f:da:0d:55:e2:af:31:b9:33:c2
Serial Number (int): 18152851103846390542231203464665969602
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:89:66:64:24:8d:c3:3a:4e:e4:22:18:3c:bc:13:08:8e:b9:9a:0a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 4c:77:bf:d9:b7:80:48:7f:71:dc:af:1a:37:87:9f:f1:7b:98:4d:80
Fingerprint (sha256): 04:34:82:10:c5:af:b4:a6:72:b0:64:25:d0:7d:b3:33:75:bb:31:2c:8a:9b:20:08:c3:01:f5:f9:f5:45:35:2b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate mm-ds-stage2.sfr.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mm-ds-stage2.sfr.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mm-ds-stage2.sfr.fr

Other certificates including the domain name sfr.fr

(limited to 100 certificates)
osiri.sfr.fr
brandcenter.sfr.fr
sport.sfr.fr
maestro.sfr.fr
cms.ezy-distrib.sfr.fr
harmony-ws.sfr.fr
sfr-messagerie.services.sfr.fr
pontis.sfr.fr
analytics.sfr.fr
familycp.sfr.fr
crm.sfr.fr
cms.sfr.fr
api-messagerie.sfr.fr
fsb2.sfr.fr
elr.sfr.fr
shop.ws-intmicrosites.sfr.fr
mdm-as.sfr.fr
*.services.sfr.fr
tonalites.sfr.fr
etoolonline.sfr.fr
pates-er.pprod.partenaires.sfr.fr
cms-hotspotsfr-test.sfr.fr
pates-xml.pprod.partenaires.sfr.fr
applimabox.sfr.fr
secure04.lithium.com
api.sfr.fr
contacteznous.sfr.fr
octopus-sd.sfr.fr
secure04.lithium.com
rp-test1.sso-a.sfr.fr
fsctt.pack.sfr.fr
billing.m.sfr.fr
pates.pprod.services.sfr.fr
ulysseservices.sfr.fr
autorepair.sfr.fr
enrolement-sbd.sfr.fr
asc-ws.sfr.fr.casepp.sfr.fr
*.casepp.sfr.fr
rp-test2.sso-a.sfr.fr
was.sfr.fr
extrapart.sfr.fr
dw0c.sfr.fr
admin-scpsppr.sdp.sfr.fr
mdm-as.sfr.fr
secure.hotspot.sfr.fr
mypc.sfr.fr
secure04.lithium.com
cms-admin.sfr.fr
kara.sfr.fr
mm-ds-stage2.sfr.fr
vadist-res.sfr.fr
securite.sfr.fr
distributeurs.sfr.fr
ezy.sfr.fr
filtrag.sfr.fr
monprofilwap.sfr.fr
secure01.stage.lithium.com
fournisseurs-pack.sfr.fr
lab-securite-ccd.sfr.fr
boctc-gallery.funinfo.sfr.fr
qlf-u.sfr.fr
nearlive.sfr.fr
api.mes-contenus.sfr.fr
repondeurplusentreprise-wifi-middle-ppd.sfr.fr
ctc.sfr.fr
dev-home.sfr.fr
p2s-ws.sfr.fr
appcol.sfr.fr
myprofil.sfr.fr
push.sfr.fr
jalios.sfr.fr
8ezc.sfr.fr
www.gangstarneworleans.com
sfrbusinessteam-marketing.sfr.fr
distributeurs.sfr.fr
adminpro.sfr.fr
moncompte-neufbox.sfr.fr
campus.sfr.com
mdm.sfr.fr
docs.sfr.fr
crm.sfr.fr
extranet.funinfo.sfr.fr
pates.services.sfr.fr
play-fut.sfr.fr
pp.home.sfr.fr
mdm.sfr.fr
mdm-ds.sfr.fr
xml.sfr.fr
assistance.cms.sfr.fr
businessapps.sfr.fr
mdm-ds.sfr.fr
analytics.sfr.fr
paws.partenaires.sfr.fr
pates.pprod.pdct.sfr.fr
secure01.stage.lithium.com
tv.sfr.fr
selfcare-webservices.sfr.fr
test-int-admin-ctc.funinfo.sfr.fr
tableau-sfa.pfv.sfr.fr
secure01.stage.lithium.com

Certificate

The complete raw certificate details for mm-ds-stage2.sfr.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nYVeEzSghoc3qQU5oza
7RKXhbkI7woAVfrpuKt8NGWa2A9TJvdDqpqZi8LgQ6VZm5ZZyXfTKM+6TXa1QctO
F0n9z/hRfMFkdimoK5zbh8zva7m8io+gouZVVis0htyuH607O5yGk3TKiAfTEHTs
sQs8QmcycF04x7QMbljWsCibkhV8T/6ZdHrJ3rG5nvUlqT72cKpOqiOWQKzQiCoV
DjujcmHxcUJKeRl3gUw9IiDVx3XHxkwnvYfrBj81wgj+P3dW+ekA73swRS8FrhK7
B+8OvJ9RvaIyK1gFxxBgFDjh+tcoxmXYKy28Y0i44hdA35y809Evj2JQz9qFzHx4
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18152851103846390542231203464665969602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE FRANCAISE DU RADIOTELEPHONE - SFR SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SFR DTAM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mm-ds-stage2.sfr.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29093039467190475665775331589258640096780807391478690798866368138774738035867140236857908997926891031635127406645381431368868470675094391978149015608950300908038614113946745487363737588830016632671952918467487160484460378274393788656816967562228390388902637815024205866793315649276990974729071364986087340923288013370681882632295255679356272850606802535213531520695781246449037388470464142127036719034702420097758819250516717328802984891738445163524375557927744424305252704251080142598598963280199157092800512464519982072521351011206174628829520966866041965080958957188606300617253419729363995636339470835437948139537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68896664248dc33a4ee422183cbc13088eb99a0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm-ds-stage2.sfr.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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