*.montpellier.inrae.fr

- INRAE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 07:db:1c:9d:96:33:80:c2:f1:7d:36:0d:42:ef:c2:7d was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INRAE

Organization: INRAE
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:db:1c:9d:96:33:80:c2:f1:7d:36:0d:42:ef:c2:7d
Serial Number (int): 10442289375288970096229088804180312701
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 89:90:98:36:56:d8:50:f2:a5:07:1a:0b:a2:cb:c5:ca:d2:22:8c:72
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 67:33:cc:b1:ea:85:dd:bd:b3:af:55:45:3c:ba:f2:2c:bf:d4:94:c3
Fingerprint (sha256): 04:e9:f6:6a:a0:18:5a:1f:44:e0:ac:d8:1c:c9:b4:b0:f6:e4:bf:13:16:40:5b:b5:9e:75:07:68:23:4b:b1:a7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.montpellier.inrae.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.montpellier.inrae.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.montpellier.inrae.fr
*.montpellier.inra.fr

Other certificates including the domain name inrae.fr

(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr

Certificate

The complete raw certificate details for *.montpellier.inrae.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNvI4fzZ+r/yLUcwxU9
oY1i6MJ5Wqs6TFX+xCmJ3pslGuv44MpmoIhsyKomdqs1OfkuSoLhzYsCKC/3LsPZ
s6JvDvbpnrrT39K9AIDQu972vclVxhNyP/85fW0kdTOPd8usaLFp9hbeilBH6tCi
TyKm2OSLAGghKJtHNJyaAuQalPsmOInuaB1ilgXo/uMdGKc2KAPxgyf/FDQNbAty
bFdTfITLCbM00PN7+FXTtDAW691YtAcSPGZM0y+yGRm7TUcMX0yUWjt4cY9PXTR9
RlVnc/RJjTIWKW+xndifXNGIHDODnNr7cds58tfxh/fU1dOg0F+j1ZuVF9rpxcCO
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10442289375288970096229088804180312701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.montpellier.inrae.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22274864367981847784428004548342777046304138920851597141308299791583549404342987199924681109797178683746956561704973272489273935425373501799388344227786282849387092763358565652452701646049871736994607904873156496379594611784794428428178526835443125628860927726586889683563710217465623885538878766668497627707718269471991857321143643838193976077807832486097676315597169908715245223356389955789047098327806234177818787672393009609107640357772551671287036632074800742872679004863128369878776068511782265763159189740133252241989903980075967960521451342402031456486274085336062891835673950800425372590706652431851607592487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8990983656d850f2a5071a0ba2cbc5cad2228c72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montpellier.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montpellier.inra.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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