www.campus-questionnaire.veolia.com

- CAMPUS VEOLIA ENVIRONNEMENT -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 01:c1:71:b2:a6:f8:8d:a2:0d:92:9c:9a:83:5c:9a:12 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CAMPUS VEOLIA ENVIRONNEMENT

Organization: CAMPUS VEOLIA ENVIRONNEMENT
Organization unit: CAMPUS VEOLIA ENVIRONNEMENT
State / Province: Val-d'Oise
Locality: JOUY LE MOUTIER
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c1:71:b2:a6:f8:8d:a2:0d:92:9c:9a:83:5c:9a:12
Serial Number (int): 2333647356055271859652540803137182226
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 1e:49:f9:33:42:52:10:44:36:8f:dd:a4:9e:72:ea:64:63:9d:6c:20
Fingerprint (sha256): 05:39:5d:a7:2a:38:1c:75:c8:a5:0f:24:5d:4a:1a:d1:14:10:3e:05:76:27:6d:ee:b3:55:2b:fa:f3:79:af:fa

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate www.campus-questionnaire.veolia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.campus-questionnaire.veolia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.campus-questionnaire.veolia.com

Other certificates including the domain name veolia.com

(limited to 100 certificates)
globalreport.veolia.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
teammate.veolia.com
ssl5.ipaper.io
sni.cloudflaressl.com
pp-nova.veolia.com
aub.sbc1.veolia.com
ssl4.ipaper.io
bms.fmis.veolia.com
vesta.veolia.com
ads.veolia.com
ssl2.ipaper.io
www.veolia.com
v0-vr2wd.agora.awsvesa.veolia.com
nextfiles-archive.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
*.campus.veolia.com
ssl.ipaper.io
gorecapp.com
filetransfer.veolia.com
ssl1.ipaper.io
ssl5.ipaper.io
www.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
tidemark-upweb-sbx.awsvetech.veolia.com
ssl.ipaper.io
ssl.ipaper.io
nps.proprete.prod.veolia.com
www.campus-questionnaire.veolia.com
ssl2.ipaper.io
ssl.ipaper.io
sni.cloudflaressl.com
tidemark-upweb-ppd.veolia.com
*.awsvesa.veolia.com
acquia-sites.com
ssl.ipaper.io
www.campus-questionnaire.veolia.com
acquia-sites.com
odyssee.veolia.com
ssl4.ipaper.io
ssl1.ipaper.io
apm.veolia.com
bms.fmis.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
apm.veolia.com
finaris.veolia.com
*.awsvesa.veolia.com
next.veolia.com
qa-ipaas.veolia.com
ssl3.ipaper.io
nextwebdev.veolia.com
reporting01.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
ssl5.ipaper.io
ssl.ipaper.io
ssl1.ipaper.io
rpa.veolia.com
teammate.veolia.com
ssl6.ipaper.io
acquia-sites.com
www.veolia.com
tls.automattic.com
acquia-sites.com
ssl.ipaper.io
acquia-sites.com
ssl1.ipaper.io
ssl.ipaper.io
portail.diag-server.veolia.com
rec-crm-contact.veolia.com
datalease-sbx.awsvetech.veolia.com
ads.veolia.com
bsh2o.veolia.com
ssl.ipaper.io
acquia-sites.com
*.industries.veolia.com
nextsft.veolia.com
sni.cloudflaressl.com
www.cat.veolia.com
globalreport.veolia.com
dss.veolia.com
*.ipapercms.dk
www.campus-questionnaire.veolia.com
sbc1.veolia.com
ssl1.ipaper.io
nps.energie.prod.veolia.com
ssl3.ipaper.io
vac-import.veolia.com
ssl4.ipaper.io
nps.portal.prod.veolia.com
ssl4.ipaper.io
ssl4.ipaper.io
acquia-sites.com
ssl2.ipaper.io
crm-contact.veolia.com

Certificate

The complete raw certificate details for www.campus-questionnaire.veolia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG9kB0l/MN3BvGV6xoqe
KfGzTDs1wEtjKZkmD1cAPGvY7Cncse1frE8xLtgBYnZ3bU8QHhRYoDz5ukTFFf9B
TdmZyBt7+um3Iw7UZlAKtPx4Idk00qwr6NclMhcKTgrNU4xtthJ961auN6NevHR3
jNPM59HnPTGbt+B7qgZmGXifwbch89oYG0BY99SITYThjQrkyiK1/8AR5QKeowCj
/fMbn87X8J0FJjz0Q9jtG2i8TQFck0mIitZa1D0DWgcn/n+TbfqzRk6Kw05nZ5lS
ZvWfcBuvhvpU+kL7ecwXRhZmSrSEk91kf8f0sp7AUkAQ/9x30GYys/NN5zv9rkWp
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2333647356055271859652540803137182226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Val-d'Oise'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'JOUY LE MOUTIER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CAMPUS VEOLIA ENVIRONNEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CAMPUS VEOLIA ENVIRONNEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.campus-questionnaire.veolia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24292683372724796010711371325694506527384606647818520170241746827417631611692969969554056391331697657188322804025809531694953135663171926333918336974257337914198457795971993758973939540820740199263815213557815148634672342637178517970426427064233943988710120547297881237616722932769410317724496326922665176536264213037523290424112021062925385493752967711582997086275401301463996980354031514462744200700282121065110006920635442240636115223964726884761078811175989111307561587636741895920499401165590268831360511858917681983657274568620155953412319149949602196857517539073371758704671905050949033315412767726224791677311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campus-questionnaire.veolia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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