www.chroneau.veolia.fr

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:37:f5:bf:fe:88:3b:3f:bd:a9:42:c6:a7:ff:09:13 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.chroneau.veolia.fr

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:37:f5:bf:fe:88:3b:3f:bd:a9:42:c6:a7:ff:09:13
Serial Number (int): 20228980665698974698391761587617597715
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:b1:4b:50:0e:e9:68:0b:51:fa:7f:ca:61:ce:61:d3:b7:b5:e7:f6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6e:1f:80:7e:5b:b2:e7:4d:12:dc:2d:3a:d8:78:5e:a6:46:03:23:11
Fingerprint (sha256): 05:44:d3:24:da:53:18:f6:0c:48:c3:9a:41:f1:3f:66:ca:72:4b:93:91:bd:01:8d:fa:2c:e9:e4:0b:80:7f:6d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.chroneau.veolia.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.chroneau.veolia.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chroneau.veolia.fr

Other certificates including the domain name veolia.fr

(limited to 100 certificates)
token.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
acquia-sites.com
www.veolia.com
*.recyclage.veolia.fr
www.veolia.com
hv360.veolia.fr
veolia.fr
sni.cloudflaressl.com
dir-mjk.veolia.fr
acquia-sites.com
www.chroneau.veolia.fr
sni.cloudflaressl.com
hv360.veolia.fr
acquia-sites.com
arcgisp.veolia.fr
sni.cloudflaressl.com
pp-compte-perseau.veolia.fr
energie.hv360.veolia.fr
veoliaeau.fr
rlv.veolia.fr
atlas.hv360.veolia.fr
www.veolia.com
parking-chrysalis.recyclage.veolia.fr
acquia-sites.com
acquia-sites.com
rec-cartocom.veolia.fr
compteurs.hv360.veolia.fr
lineo-national.m-ve.com
analytics.veolia.fr
rec-arcgiss.veolia.fr
mondiag.eau.veolia.fr
energie.hv360.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
simulateur.vedif.eau.veolia.fr
acquia-sites.com
*.recyclage.veolia.fr
rec-monappli.veolia.fr
rec-monacces.veolia.fr
experience.eau.veolia.fr
www.veolia.com
int-chroneau.veolia.fr
simulateur.eau.veolia.fr
energie.hv360.veolia.fr
analytics.veolia.fr
sni.cloudflaressl.com
*.recyclage.veolia.fr
www.veolia.com
acquia-sites.com
*.recyclage.veolia.fr
sni.cloudflaressl.com
formation.veolia.fr
sinistres-litiges.eau.veolia.fr
rec-monappli.veolia.fr
monappli.veolia.fr
bpartner.eau.veolia.fr
dir-proxy-esb.veolia.fr
experience.eau.veolia.fr
rec-monacces.veolia.fr
rec-rlv.veolia.fr
hv360.veolia.fr
vams-tst.m-ve.com
pp-mallette.veolia.fr
rec-rlv.veolia.fr
monportail.veolia.fr
mdm.recyclage.veolia.fr
rec.api.eau.veolia.fr
www.veolia.com
experience.eau.veolia.fr
sni.cloudflaressl.com
acquia-sites.com
acquia-sites.com
energie.hv360.veolia.fr
recette3-travo.veolia.fr
monbureau.eau.veolia.fr
diag-and-drop.veolia.fr
portail-commercial.veolia.fr
int-chroneau.veolia.fr
compteurs.hv360.veolia.fr
www.veolia.com
lettre-veoliaeau.fr
*.energie.veolia.fr
acquia-sites.com
www.veolia.com
simulateur.eau.veolia.fr
pp-portail-commercial.veolia.fr
acquia-sites.com
www.veolia.com
acquia-sites.com
rec-monappli.veolia.fr
simulateur.eau.veolia.fr
acquia-sites.com
sni.cloudflaressl.com
integration-mobilite.veolia.fr
www.veolia.com
www.veolia.com
acquia-sites.com
metropolerouenouest.eau.veolia.fr

Certificate

The complete raw certificate details for www.chroneau.veolia.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNlqxoZvmKeon/Z/t6Iq
y81Be6GxtEWcAuK7YABYspcaXMFPwngpYCUcjuwWjeVr2/yuz6enHIbM8JXfimHZ
wcFyYYmuWnn9S9D0BqvVtWqECM91yJDqmJXKJKkg/0iVvFPYC6zL66MVoMaKKAo3
vfqxYl87El5skFExR/Jb/og2+hSvmujxIX7G3NJgYKVm5fDWIPpua7yNaYfq2Ssw
SDx6r4KpWksZ/PTzHBq26nNyW5eZT1ZREkwDbjK1RUngF8a472vzUvjFxalureAN
YgMDIrcebCIqLt3GrK3Z5U6sKHTY06fAX4mJBomotgkJS7Ipha2PRSd0XWxSsG/P
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20228980665698974698391761587617597715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.chroneau.veolia.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21315247598100891653949936992036167026688197667313670134633811190372697580349146856668272275175724079555215661983659740200052555648837364651358787026637671459060272438157161548794865883678719722686757200218321567880251431648745184099000353700936333967581341672642360532445308460561629705114294892462474622229564568622772611859435370082090681016111345576796758272826690864721556306483184418997140246229635771130668478467862659848416254191339990108396480298040718519991165685491166097213774016130075361015136038018539406379109398520200118686974111706691697015756578550126011550497738424598033840784753550608991312138011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00b14b500ee9680b51fa7fca61ce61d3b7b5e7f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chroneau.veolia.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000017123bd044c00000403004730450221008c1f6b8806d1de28435eac4bf6d9db6762bd3d4e2c31794d694effc47393c781022076313112e6ddc3302030ede4d49200fc63560684246997d000160072cee28e220076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017123bd0430000004030047304502201352fe71a1def939fa6207ecaeec1364065b34bc2e3e2b55eb01843524a2337e022100bbd497e850b601ca1aefcee084e220afae3ea0a4ccc1f6da56200124ec2171ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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