www.ac-montpellier.fr

- Ministere Education Nationale (MENESR) -

Issued by AC Infrastructures

About this certificate

This digital certificate with serial number 19:8f:f7:bf:09:74:00:af:1f:98:4b:bf:37:1a:a5:ff was issued on by Ministere education nationale (MENESR).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministere Education Nationale (MENESR)

Organization: Ministere Education Nationale (MENESR)
Organization unit: 110 043 015
Organization unit: ac-montpellier
Country: FR

Ministere education nationale (MENESR)

Organization: Ministere education nationale (MENESR)
Organization unit: 110 043 015
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 19:8f:f7:bf:09:74:00:af:1f:98:4b:bf:37:1a:a5:ff
Serial Number (int): 33978223236070123074482501218280842751
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 41:55:54:4f:5f:47:45:4e:45:52:41:54:45
AuthorityKeyId: be:38:22:7f:72:46:a9:d6:84:15:9f:d5:c8:28:7f:5c:b3:02:20:cb

Fingerprint (sha1): d7:61:db:de:8f:e2:e1:e0:02:70:83:63:8e:12:7e:73:6e:4e:d6:17
Fingerprint (sha256): 05:7c:a2:fa:62:13:3e:4e:25:53:28:67:6b:01:fb:19:20:b3:a2:5d:e9:f7:a7:1e:ae:c2:d0:29:69:6b:9a:41

Issuing Certificate URL: http://www.igc.education.fr/Infrastructures.crt

Revocation information

CRL Distribution Point: http://crl1.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl2.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl3.igc.education.fr/Infrastructures.crl

Check the revocation status for certificate www.ac-montpellier.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ac-montpellier.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ac-montpellier.fr

(limited to 100 certificates)
calendar.ac-montpellier.fr
gdai.ac-montpellier.fr
cas2ct.ac-montpellier.fr
smtp.ac-montpellier.fr
siam.ac-montpellier.fr
ac-montpellier.fr
si2d.ac-montpellier.fr
publication-a11.ac-montpellier.fr
bv.ac-montpellier.fr
www.ac-montpellier.fr
ac-montpellier.fr
echanges.ac-montpellier.fr
ac-montpellier.fr
si2d.ac-montpellier.fr
www-lyc.ac-montpellier.fr
ac-montpellier.fr
bv.ac-montpellier.fr
glpi.ac-montpellier.fr
www.ac-montpellier.fr
*.ac-montpellier.fr
oudige.ac-montpellier.fr
www-lyc.ac-montpellier.fr
bv.ac-montpellier.fr
test-region.ent2d.ac-montpellier.fr
www.ac-montpellier.fr
etab.ac-montpellier.fr
entecole-formation.ac-montpellier.fr
etab.ac-montpellier.fr
etab.ac-montpellier.fr
www-clg34.ac-montpellier.fr
webmail.ac-montpellier.fr
www.ac-montpellier.fr
etab.ac-montpellier.fr
etab.ac-montpellier.fr
entecole-test.ac-montpellier.fr
test-region.ent2d.ac-montpellier.fr
smtp.ac-montpellier.fr
dev-clg34.ac-montpellier.fr
etab.ac-montpellier.fr
etab.ac-montpellier.fr
duer.ac-montpellier.fr
gdai.ac-montpellier.fr
etab.ac-montpellier.fr
ecolle.lyc-joffre-montpellier.ac-montpellier.fr
listes.ac-montpellier.fr
courrier.ac-montpellier.fr
wsentecole.ac-montpellier.fr
entecole-test.ac-montpellier.fr
clg34.ac-montpellier.fr
*.ac-montpellier.fr
usine-sites4.ac-montpellier.fr
entecole-preprod.ac-montpellier.fr
www-lyc.ac-montpellier.fr
etab.ac-montpellier.fr
www.ac-montpellier.fr
ac-montpellier.fr
test-region.ent2d.ac-montpellier.fr
caldav.ac-montpellier.fr
id.ac-montpellier.fr
etab.ac-montpellier.fr
entecole.ac-montpellier.fr
bareme.ac-montpellier.fr
usine-sites3.ac-montpellier.fr
smtp.ac-montpellier.fr
oudige.ac-montpellier.fr
si1d.ac-montpellier.fr
ent2d-resultat-qualif.ac-montpellier.fr
riddo.ac-montpellier.fr
api.ac-montpellier.fr
famille.ac-montpellier.fr
*.ac-montpellier.fr
usine-sites1.ac-montpellier.fr
bcdi.ac-montpellier.fr
etab.ac-montpellier.fr
www-clg11-66.ac-montpellier.fr
be1d-echanges.ac-montpellier.fr
usine-sites9.ac-montpellier.fr
bcdi.ac-montpellier.fr
test-region.ent2d.ac-montpellier.fr
www.ac-montpellier.fr
test.ent2d.ac-montpellier.fr
etab.ac-montpellier.fr
ac-montpellier.fr
etab.ac-montpellier.fr
etab.ac-montpellier.fr
www-clg30-48.ac-montpellier.fr
intranet.in.ac-montpellier.fr
etab.ac-montpellier.fr
www.ac-montpellier.fr
dev-lyc.ac-montpellier.fr
etab.ac-montpellier.fr
pia.ac-montpellier.fr
ac-montpellier.fr
etab.ac-montpellier.fr
entecole-preprod.ac-montpellier.fr
etab.ac-montpellier.fr
oudige.ac-montpellier.fr
sync.ac-montpellier.fr
ac-montpellier.fr
echanges.ac-montpellier.fr

Certificate

The complete raw certificate details for www.ac-montpellier.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq89emdOv7zVUlaShJO7V
i+KOgpBOiZBGlt62yDg+Vm0nux6/0gO0f2loox8/ddvKxXFZMu1rdQz8KEPBzeGu
svcqyiaz3AFIOMR7GRRdMZA0EVpb+uyAoHZpTPf5ql5L74aAAz1G2aFCL+ayAPCQ
f40l9h1/iLPNTv3GyS1HxL5+glfd1E+/mg5ZIccmxxZDTjlDyksrckp9YaGOtf00
3yFulcckB7VkNcFGqUUAU4UTOkoXuxUOZEdFPDmolhx9neD1xirdvpCaunFna/uZ
zfMBV1XWRRJ0xprHDtupzGUIyks5ACwpC7vQ3ejVlqpwXd/Zz1myUfw41w7WXXJg
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33978223236070123074482501218280842751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere education nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Infrastructures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 15:06:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-09 15:06:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere Education Nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-montpellier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ac-montpellier.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21689007877960388316670792161853498058812741109044236367634431314325552711116317667314766075299883325823623744437942117970744303492238065974919608263539264866411729899873813675219986972386285061489412963435010957170680858624018593244370504055139016118431080511991231719763959216292576229726089787559349774849789965562253009089413135138461882720331268603591103889687881275754428437665329994215379642461087763535086929714686050801840047932709363256358704810997641823146678755598424782108189636080540758844763390056300925794692230609370260221549943956895185275347086780916096703760417297577286943288839331517525390418143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.igc.education.fr/Infrastructures.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be38227f7246a9d684159fd5c8287f5cb30220cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.20326.69.1.1.4.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
							4155544f5f47454e4552415445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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