lecashback.societegenerale.fr

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 2e:29:1e:5b:dd:90:d0:9a:8d:46:3b:3a:fe:f3:92:eb:f1:bc:dd:bc was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Organization unit: 552120222
State / Province: Ile-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:29:1e:5b:dd:90:d0:9a:8d:46:3b:3a:fe:f3:92:eb:f1:bc:dd:bc
Serial Number (int): 263530550639821025078479457446453475578031693244
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 57:a1:9f:42:ce:ea:b8:72:f0:49:2c:d5:d4:6f:a2:d1:fb:7f:7c:46
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): dc:99:0b:d0:b6:94:82:21:a2:c8:d9:6f:e7:aa:b6:3b:af:58:8a:82
Fingerprint (sha256): 07:28:ff:c6:42:bf:5d:3c:15:68:d0:2b:8c:8f:92:92:6c:3e:87:81:fd:63:00:ae:55:64:f3:11:e2:94:0e:23

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate lecashback.societegenerale.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lecashback.societegenerale.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lecashback.societegenerale.fr

Other certificates including the domain name societegenerale.fr

(limited to 100 certificates)
dca.homologation.societegenerale.fr
dca.societegenerale.fr
entreprises.societegenerale.fr
particuliers.secure.societegenerale.fr
infact.factoring.societegenerale.fr
developer.retail.homologation.societegenerale.fr
statse.par.societegenerale.fr
replay.societegenerale.fr
transferts.homologation.societegenerale.fr
privatebanking.societegenerale.com
dca.societegenerale.fr
entreprises.societegenerale.fr
professionnels.homologation.societegenerale.fr
transferts.homologation.societegenerale.fr
bo-tablette-clicom.societegenerale.fr
particuliers.secure.societegenerale.fr
associations.societegenerale.fr
hscriptso.par.societegenerale.fr
hstatso.par.societegenerale.fr
www.panelclients.societegenerale.fr
www.equipmentfinance.societegenerale.com
solutionsgestionprivee.portail.homologation.societegenerale.fr
scriptso.par.societegenerale.fr
hscriptso.par.societegenerale.fr
professionnels.homologation.societegenerale.fr
hscriptsp.par.societegenerale.fr
m.societegenerale.fr
entreprises.societegenerale.fr
devenirclient.particuliers.homologation.societegenerale.fr
statso.par.societegenerale.fr
hietemi.socgen.com
lecashback.societegenerale.fr
docsp.par.societegenerale.fr
entreprises.societegenerale.fr
m.entreprises.societegenerale.fr
entreprises.certif.homologation.societegenerale.fr
infact.factoring.societegenerale.fr
eip-voteag.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
bo-tablette-clicom.societegenerale.fr
pch.societegenerale.fr
entreprises.secure.homologation.societegenerale.fr
particuliers.secure.homologation.societegenerale.fr
scriptsp.par.societegenerale.fr
afrique.societegenerale.com
static.homologation.societegenerale.fr
idees.societegenerale.fr
entreprises.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
entreprises.societegenerale.fr
mobile.societegenerale.fr
static.homologation.societegenerale.fr
filetransfer.prd.tomg.societegenerale.com
sgetvous.societegenerale.fr
particuliers.secure.societegenerale.fr
www.jeuhautefidelite.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
entreprises.certif.homologation.societegenerale.fr
m.homologation.societegenerale.fr
www.carteespeces.societegenerale.fr
transferts.societegenerale.fr
global.societegenerale.com
afrique.societegenerale.com
infact-hom.societegenerale.cga.fr
orl105.societegenerale.fr
solutionsgestionprivee.portail.homologation.societegenerale.fr
coupdenvoi.societegenerale.fr
equipmentfinance.societegenerale.com
particuliers.sandbox.societegenerale.fr
particuliers.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
professionnels.secure.societegenerale.fr
transferts.homologation.societegenerale.fr
*.exp.gumgum.com
infact.factoring.societegenerale.fr
pch.homologation.societegenerale.fr
www.warrants.com
lecashback.societegenerale.fr
static.homologation.societegenerale.fr
entreprises.societegenerale.fr
reglement.societegenerale.com
entreprises.homologation.societegenerale.fr
votations.24heures.ch
m.particuliers.societegenerale.fr
admin-bo-tablette-clicom-dev.societegenerale.fr
www.solutions.sgcib.com
associations.hml.societegenerale.fr
www.homopar1.societegenerale.fr
m.entreprises.homologation.societegenerale.fr
infact.factoring.societegenerale.fr
mediateur.societegenerale.fr
www.equipmentfinance.societegenerale.com
www.societegenerale.fr
scriptse.par.societegenerale.fr
logitelnet.socgen.com
docsp.par.societegenerale.fr
www.parade.societegenerale.fr

Certificate

The complete raw certificate details for lecashback.societegenerale.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZRH2fUqpNNXEOskVuwR
1G+ask1aeZW6TNbAwGzdSGtrMm6fYcm5W60Z0JCznxO39XcMR3hiSR2XPpROvLYH
3vJzkpte3U7gmNWKJ156ctMrF5skX8zgI67ewAVEG9FndlzrHHW3/4JhURFordED
xQmnB3GQKZn5sCs8bxejTUS6xJYznwxlhSnXkUNlYW0eTzGMU7YT9wHGSazp5DqY
n0cVYe2ebEip+OQYWWHa/SYcUWFp0psZOw+Hsu6SJHeZyTgo50Ro351+K3z4Ml0Q
9hGoTQq4hUWelF3FHkAYYN7upXerUCXGo/UPBjIu7TUvcSfCFwm1dbZ1XRaI1CR+
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263530550639821025078479457446453475578031693244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 16:00:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-26 16:10:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '552120222'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lecashback.societegenerale.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20397487022892759054541987407134822812132858540437341742577502315938024654722300567558306733599694525798162437123313288339655874186425713378036476589588636007167673888644526032789978119125353830876378084140843510435630812586046328133424268391513156550482597381493151960723758505581944577174671690750628885070758029489813765227174179467467204386631961122984668832448263432590890988289493376961089218216944280452181154546211362702824464922429178000132507990314951114680377397755838093516877242317561211939357381054322998179140350051476320151386215976642553362342732744508178549006241645232505601209491622558719602359933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecashback.societegenerale.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57a19f42ceeab872f0492cd5d46fa2d1fb7f7c46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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