www.ter.sncf.com

- SOCIÉTÉ NATIONALE SNCF SA -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:4e:6f:46:f6:8c:6e:5d:40:25:19:f1:66:fa:e5:77 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOCIÉTÉ NATIONALE SNCF SA

Organization: SOCIÉTÉ NATIONALE SNCF SA
State / Province: Île-de-France
Locality: Saint-Denis
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4e:6f:46:f6:8c:6e:5d:40:25:19:f1:66:fa:e5:77
Serial Number (int): 1736484120491096973129254090816808311
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 28:03:f5:2a:7b:52:36:c9:70:32:dd:c9:02:64:6f:76:4d:91:97:9b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ea:73:df:8b:19:55:95:56:aa:59:c5:41:08:aa:43:f9:9e:81:cc:3d
Fingerprint (sha256): 06:54:11:6f:46:b0:aa:48:fa:00:97:3e:f8:7c:19:61:6e:dc:29:d6:a8:10:d3:a9:65:be:ae:7f:13:4d:3d:db

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.ter.sncf.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ter.sncf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ter.sncf.com
ter.sncf.com
m.ter.sncf.com
trainlio.sncf.com
nomadtrain.sncf.com
www.trainlio.sncf.com
www.nomadtrain.sncf.com

Other certificates including the domain name sncf.com

(limited to 100 certificates)
connect.sncf.com
*.carmen.sncf.fr
www.programme-voyageur.sncf.com
netkin.eu
evenements.sncf.com
tech.sncf.com
www.webresafret.sncf.com
lebartgv.sncf.com
r.connect.sncf.com
netkin.eu
netkin.eu
recette1.moncompte.sncf.com
mdmvsp.sncf.com
recette1.idpass.sncf.com
*.defi-ingenieurs.sncf.com
*.sncfconnect.com
mdc.sncf.com
acces-authentification.sncf.com
module-photo.sncf.com
candidat.emploi.sncf.com
netkin.eu
reactifs.sncf.com
akamai-san41.exacttarget.com
data.sncf.com
www.margo.sncf.com
www.recherche.sncf.com
piperi.sncf.com
sncf.com
*.fidelite-programme-voyageur.sncf.com
pmad.reseau.sncf.com
www.ter.sncf.com
ressources.data.sncf.com
sncf.com
epublimmo.sncf
tech.sncf.com
moncompte.sncf.com
netkin.eu
module-photo.sncf.com
accessibilite.sncf.com
collection80.sncf.com
www.nouveau.sncf.com
www.candidat.emploi.sncf.com
admins.voyages-sncf.com
emploi.sncf.com
*.collaboratif.sncf.com
espacesferroviaires.sncf.com
e-livre.sncf.com
s2if-gie.sncf.com
goodies.sncf.com
usine.idpass.sncf.com
netkin.eu
netkin.eu
info.portailentreprises.sncf.com
39-45.sncf.com
evenements.sncf.com
recette2.lesinfos.sncf.com
secure.analytics.voyages-sncf.com
e-livre.sncf.com
formulaire.vsct.fr
netkin.eu
*.fret.sncf.com
services.idpass.sncf.com
www.programmefid.com
recette1.info-voyageurs.sncf.com
pro-adhesion.sncf.com
www.portailentreprises.sncf.com
multimedia.sncf.com
int1-tictac.sncf.com
info.portailentreprises.sncf.com
www.candidat.emploi.sncf.com
trophees.sncf.com
abonnement.voyages-sncf.com
tech.sncf.com
netkin.eu
www.programme-voyageur.sncf.com
recette1.info-voyageurs.sncf.com
e-livre.sncf.com
publimmo.sncf.com
netkin.eu
prosynapses.sncf.com
idpass.sncf.com
e-consultations.sncf.com
accessibilite.sncf.com
www.budget.sncf.com
mdmsentry.sncf.com
goodies.sncf.com
netkin.eu
*.ter.sncf.com
info.portailentreprises.sncf.com
preprod.digipass.sncf.com
netkin.eu
recette1.ticketing-sncf.vsct.fr
www.srtpf.fr
netkin.eu
recette1.acces-client.sncf.com
www.feria.sncf.com
hapi.sncf.com
lebar.sncf.com
usine.idpass.sncf.com
www.cv.emploi.sncf.com

Certificate

The complete raw certificate details for www.ter.sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1736484120491096973129254090816808311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOCIÉTÉ NATIONALE SNCF SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ter.sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745186086968620738765458237547371586569029189073346095411323210568726103093740602607544357158712608264864603643054022625966378465348789561486462466056131310782219016839404984356423221201078439275458042073017993493971266849943706876288231972793063846466325171968241280078176048224673040658782593515365377694491775926286467127120238134790483088872872285450488486031655527441213375221447032535300205877562950982487577501460589482650157308764553608814930613814758371457125420558219246330897713172006477022357650419579844183304476173315719637327555092552088797938534694927023098667294532586416188349142338348473199121831933811963149696935676389136989408312946607410091801255868657084166509863656408824527041548320798008726140557856680985758294389493504990314975015420687528356345336166394344754664043483491021981237443203135850302898518974399279062315289627503274011527045777222903403494713963940032131053472738762448635685592950703532459249821353615620874625282861167319185287061465547311440384844775692397723608525356414804401985470093330042849485358186483625578679066867622135554601616535205618121888533421532845994293680594546946437818928966646942497453199552142841796309142822305840184154500711043844799754723915161482995306373054101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2803f52a7b5236c97032ddc902646f764d91979b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ter.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ter.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ter.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlio.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomadtrain.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trainlio.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nomadtrain.sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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