moncompte-qualif-legacy.enedis.fr

- ENEDIS SA -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 01:fd:72:e1:08:0d:27:36:c6:77:c6:45:7e:fc:00:b8 was issued on by DigiCert Ireland Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ENEDIS SA

Organization: ENEDIS SA
State / Province: Île-de-France
Locality: Courbevoie
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 01:fd:72:e1:08:0d:27:36:c6:77:c6:45:7e:fc:00:b8
Serial Number (int): 2645209124517390559770190934680797368
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: be:77:e4:25:9a:2d:99:bc:a6:67:6d:0a:96:35:0f:4c:a1:85:31:d5
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): e3:d2:5f:b5:98:9d:71:29:97:c1:9a:28:ff:1e:aa:29:bd:43:7f:96
Fingerprint (sha256): 06:00:19:d0:3f:4f:c1:29:7c:e4:6b:70:ee:4e:52:d9:49:ab:a5:8d:a7:96:ed:c2:46:06:ee:6d:9e:ff:ec:31

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate moncompte-qualif-legacy.enedis.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for moncompte-qualif-legacy.enedis.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

moncompte-qualif-legacy.enedis.fr
moncompte-qualif.enedis.fr

Other certificates including the domain name enedis.fr

(limited to 100 certificates)
e-stock.enedis.fr
sikapa-iq.enedis.fr
ie-saas-test.enedis.fr
sge-perfi.enedis.fr
restheart.tmm.snatpool.f5ie.prd.lbp.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
espace-client-particuliers-rec-dmz.enedis.fr
intrapreneur.enedis.fr
infops.enedis.fr
zep304dg.enedis.fr
espace-client-collectivites.enedis.fr
startmeup.enedis.fr
deck-recette.enedis.fr
gate3196.enedis.fr
portail-osr-prestataires.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
pcyintplypdi001.neoprod.edf.fr
ws.inforeseau.api.enedis.fr
espace-client-connexion-pprod.erdf.fr
int-myaccess.edf.fr
gate3360.enedis.fr
portail-osr-prestataires.enedis.fr
mooc.enedis.fr
microapps.enedis.fr
herakles.enedis.fr
zec304dk.enedis.fr
data.enedis.fr
api.public.cinke-evolution.perf.enedis.fr
archivage-disco.enedis.fr
pcydmzplywfe001.intranet.edf.com
board.qual.linky.enedis.fr
mooc.enedis.fr
noeintplypfe001.neoprod.edf.fr
laruche.enedis.fr
api-lincs-qualif.enedis.fr
meciteasy.enedis.fr
zhb-rest.tmm.f5ie.prd.lbp.enedis.fr
gw.hprd.api.enedis.fr
geosite.enedis.fr
sge-b2b.enedis.fr
sge-b2b.enedis.fr
collab.intranet.enedis.fr
gw.prd.b2b.enedis.fr
mooc.enedis.fr
ie-saas-test-ri.enedis.fr
espace-client-entreprises-pprod.enedis.fr
portail-osr-prestataires-rec1.enedis.fr
dataposte-sei.enedis.fr
moncompte-qualif-legacy.enedis.fr
datahub.enedis.fr
espace-client-particuliers.enedis.fr
bali.enedis.fr
alexv2-apipra-pprod.enedis.fr
zep3322a.enedis.fr
noeintplypfe002.neoprod.edf.fr
iq-caraibe.enedis.fr
alexv2api-prdn-pjv-02.enedis.fr
data.enedis.fr
noedmzplywdi001.intranet.edf.com
espace-client-particuliers-pprod.enedis.fr
egmaops.enedis.fr
distri-raccordement-mco.enedis.fr
intq.ecoflot.enedis.fr
prd.apigo.enedis.fr
data.enedis.fr
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
ecoflot.enedis.fr
alexv2api-recd-izi-01.enedis.fr
datahub.enedis.fr
moncompte-qualif.enedis.fr
moncompte.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
brandcenter.enedis.fr
lincs-live-admin.enedis.fr
appamiante.enedis.fr
espace-client-collectivites-rec-dmz.enedis.fr
fournisseursdenedis.enedis.fr
facile-commune.enedis.fr
pp-smartpush.edf.fr
accueil-operateur.enedis.fr
smartgrid-solenn.enedis.fr
noeplyaccess01.edf.fr
times-services.enedis.fr
elan-service-iq.enedis.fr
apigile.prod.enedis.fr
deploisat.form.linky.enedis.fr
espace-client.enedis.fr
pki.microapplications.enedis.fr
posteclean.enedis.fr
agir.oi.enedis.fr
myaccess.myelectricnetwork.com
gw.prd.tmm.enedis.fr
arcam.enedis.fr
infoflex-partner-gateway-rec.enedis.fr
noedmzplywdi001.intranet.edf.com
moncompte.enedis.fr
ws.sikapa-RCC.enedis.fr

Certificate

The complete raw certificate details for moncompte-qualif-legacy.enedis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLQ96sWjMogcK9lt+15n
cKOVfaVvRP47kS+lTfdpHyGg6t0piZDrTf9I09XXb/PISk2vxOztQUrVxOxYyaEA
lbYMqIrdXBxx0CoRlA5nkKFffA690Ih64WrhgKUhHBw8aenRlc9fO8Yl23TV6/I9
wVnv/P3z4yCcHX6oRQvYjgLP+lQKFYqq7pDh31APxt7Aljf/BtPCPStCS/YBUfpM
psVfelQ5kqEFezqIv2zp6KQBT9Dv0xOVaXOxBh9dNmwpcSZG3ysSju9Oifs7ijP8
WVnIVJjEAyKHs8C89D8bceKzF3ARShUvELtr++YErNQw41Js1qd8ghIVYbYPAUJT
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2645209124517390559770190934680797368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ENEDIS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'moncompte-qualif-legacy.enedis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24326635129042299467206734957410926532224800422084750061146106451804035408282821188422885258055239132206269810103391733161301069936510946118373439621371581587838432745329224685511122263979440758123617233506505460785016675437283471412498648660086633213316774610185388033331221822957205272321308168346726974215871704724719682205533154534912930241340712954420367095624288304379603896466082881071207033904512957973069885133385638941766462515396770572438797889472590814854826719986252083176580067036075484363797916039083522270078216694302946373722211781676236106904934938617828465069063435408005033175570333049986943701827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be77e4259a2d99bca6676d0a96350f4ca18531d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte-qualif-legacy.enedis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte-qualif.enedis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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