authforte-pro2.sf.gae2.intra.laposte.fr

- LA BANQUE POSTALE SA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 63:97:10:a5:92:b7:fd:f7:e5:a9:c2:f3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LA BANQUE POSTALE SA

Organization: LA BANQUE POSTALE SA
State / Province: Val-de-Marne
Locality: IVRY SUR SEINE
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 63:97:10:a5:92:b7:fd:f7:e5:a9:c2:f3
Serial Number (int): 30821642383223666776960778995
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 67:de:36:f4:fd:32:0f:87:86:f0:8a:c6:36:c2:c4:c3:31:6f:23:d0
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): d7:ef:9d:97:b8:8a:0d:0b:27:3f:a1:f0:a8:ae:e0:81:cb:b7:ef:25
Fingerprint (sha256): 04:7f:fa:b9:f0:41:d6:b0:77:52:6a:23:7b:14:26:fb:a0:7c:57:ec:ac:16:7c:d8:65:8f:83:80:5f:48:9a:6b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate authforte-pro2.sf.gae2.intra.laposte.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for authforte-pro2.sf.gae2.intra.laposte.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

authforte-pro2.sf.gae2.intra.laposte.fr

Other certificates including the domain name laposte.fr

(limited to 100 certificates)
eec.prod.net.extra.laposte.fr
web.macarteamoi.net-courrier.extra.laposte.fr
uac.ref.disit.log.intra.laposte.fr
nodejs.dev.log.intra.laposte.fr
www.internet.buralistes.net2-courrier.extra.laposte.fr
dir.wa.pandore3.log.intra.laposte.fr
www.mailtrack.laposte.fr
www.colissimo.entreprise.laposte.fr
access2.extra.laposte.fr
extranet2.extra.laposte.fr
nomadisme.pp-lbr.laposte.fr
genius.laposte.fr
uac.ref.disit.log.intra.laposte.fr
edge.refmelposte.laposte.fr
www.receptionlrel.laposte.fr
www.commedia.laposte.fr
www.portail-grands-comptes-courrier.laposte.fr
nuget-neo.sf.intra.laposte.fr
reservation.nomade.bordeaux.laposte.fr
acc-events.build.notifclient.net.extra.laposte.fr
www.refpasiv2.laposte.fr
reftsf.laposte.fr
webmail06-fdv.sf.intra.laposte.fr
repositories-public.net.extra.laposte.fr
www.serenadetest.laposte.fr
wiki.net.extra.laposte.fr
pp.pmm-ws.worldline.gae2.intra.laposte.fr
adhesion.digiposte.extranet.sf.intra.laposte.fr
si-enseigne.laposte.fr
srv01ai.sf.intra.laposte.fr
preprod-lefilbusiness.laposte.fr
gestri.net-courrier.extra.laposte.fr
mail.corp.laposte.fr
boxecommerce.laposte.fr
packmna.laposte.fr
edgecastcdn.net
www.presse-poste.com
edge-px.refvisio.laposte.fr
blog-french-iot.laposte.fr
pegase-re7.gae2.intra.laposte.fr
localiser.laposte.fr
bwpas.c360.net-courrier.gae2.intra.laposte.fr
interco-tlsmut.ste.reseau.intra.laposte.fr
datanova.laposte.fr
pere-noel.laposte.fr
manager.interop.digiposte.extra.laposte.fr
boxecommerce.laposte.fr
BOXECOMMERCE.LAPOSTE.FR
lrel.boutiqueducourrier.laposte.fr
api.laposte.fr
monespaceclient.laposte.fr
refprod.net-courrier.extra.laposte.fr
PST-CW-ISEPSN04.orange.wifi.laposte.fr
*.http.dev.pop.openpaas.hpmetier.sf.intra.laposte.fr
ServicesRIAM.int.groupe.extra.laposte.fr
prod.lapostemobile.ecarepro.log.intra.laposte.fr
www.idees.laposte.fr
back.spid-escaleo.net-courrier.extra.laposte.fr
messagecolissimo.laposte.fr
treso.extra.laposte.fr
cn23.laposte.fr
messagecolissimo.laposte.fr
www.delphes-bipe.int.extra.laposte.fr
lrel.boutiqueducourrier.laposte.fr
servicesplus.laposte.fr
www.kitrouteur.laposte.fr
services-reexpedition.laposte.fr
orgatri.net-courrier.extra.laposte.fr
assurancescnp-pv2pp.sf.gae2.intra.laposte.fr
smtp-sepamail-cma.sf.intra.laposte.fr
e3c.lbpf.extranet.sf.intra.laposte.fr
philamairie.laposte.fr
authforte-pro2.sf.gae2.intra.laposte.fr
ppulse.laposte.fr
fondationlaposte.net.extra.laposte.fr
neoclients.net-courrier.extra.laposte.fr
www.reclamations-presse.net2-courrier.laposte.fr
stge-opp-natixis-sjr.laposte.fr
www.portail-grands-comptes-courrier.laposte.fr
internet.extra.laposte.fr
servicesplus.laposte.fr
docapost-innovation.fr
webservices.pp.transactis.extranet.sf.intra.laposte.fr
selfservice.acc.net2-courrier.extra.laposte.fr
mob.evenement-pp.colis.intra.laposte.fr
www.base-connaissances-offres-et-services.laposte.fr
preprod.cachet.d2s.laposte.fr
spid.laposte.fr
www.internet.eboutique-aa.net2-courrier.extra.laposte.fr
ws-read-ev3.lbp-iard.extranet.sf.intra.laposte.fr
aide.cotepro.laposte.fr
git-rec.sf.intra.laposte.fr
applis1.groupe.extra.laposte.fr
nomade.laposte.fr
annuaire.laposte.fr
procuration.net-courrier.extra.laposte.fr
preprod.webservice.validcontact.laposte.fr
nodejs.dev.log.intra.laposte.fr
blog-french-iot.laposte.fr
e3c.lbpf.extranet.sf.intra.laposte.fr

Certificate

The complete raw certificate details for authforte-pro2.sf.gae2.intra.laposte.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjL0C0urN9myA2fvityt
SII8GFNS9LlJjP2CrDuxbT49undh14LIyIatQHmEwVhbbr9dpubUZo3Q4RHdxnb/
EHMr15nKNivA+y6DTu1nEthFd3agIPfx2bA4Ekl2CHDAU4roHV0uSE2/yMAGmrPO
D1uIonCqlW/egjFnq8r4RxPOKAJWnbE2SpyBadNhLn9GEZEv+h2PZrPPftQU/4B6
Hrgde8pAzZRD0/1rXD4hj1Kuxs9E4DeBNIay3WtcLZCgoDtzGsRP9woKMR7wL7k2
npJPTM5uAsxTLriQ4VO1YIe/N83p0pQwO7qYI+FHnBLCQ3fAhzh+33+Qt+ih8M/Z
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30821642383223666776960778995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 08:31:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-12 08:31:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Val-de-Marne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IVRY SUR SEINE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LA BANQUE POSTALE SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'authforte-pro2.sf.gae2.intra.laposte.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26030216830393879750943571600460595074559122267278335513102984207557680191331603470950497460884143185480635338253964014119370315105784502166278969819815542489769723208190418811853423358164378883415653884842752635731440594263706839254030530113049702737052439363841845161766629797728415832194736175511232874996552106423102523242965486394511102403558103109212599667275281292211181114035028342581532776953640265825505423206144817218448672038238945255708902711443844228401182576963362436747598574793197053274533516846350519962737946353235386889723935214952899280929787514758602048778846479569392656327771740708425100679471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authforte-pro2.sf.gae2.intra.laposte.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67de36f4fd320f8786f08ac636c2c4c3316f23d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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