sepia2.ac-reims.fr

- Ministere Education Nationale (MENESR) -

Issued by AC Infrastructures

About this certificate

This digital certificate with serial number ce:2d:2d:c4:aa:e9:7e:2a:14:ac:f5:a4:dc:94:c3:0c was issued on by Ministere education nationale (MENESR).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministere Education Nationale (MENESR)

Organization: Ministere Education Nationale (MENESR)
Organization unit: 110 043 015
Organization unit: ac-reims
Country: FR

Ministere education nationale (MENESR)

Organization: Ministere education nationale (MENESR)
Organization unit: 110 043 015
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): ce:2d:2d:c4:aa:e9:7e:2a:14:ac:f5:a4:dc:94:c3:0c
Serial Number (int): 274055548780373481362476171330682405644
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 41:55:54:4f:5f:47:45:4e:45:52:41:54:45
AuthorityKeyId: be:38:22:7f:72:46:a9:d6:84:15:9f:d5:c8:28:7f:5c:b3:02:20:cb

Fingerprint (sha1): d5:70:0b:a4:f6:94:df:d2:0a:67:24:8f:a1:50:53:90:a5:22:91:33
Fingerprint (sha256): 07:d9:53:04:85:8d:04:ff:0b:16:0c:c0:38:40:d3:95:7a:fc:f2:c3:d1:af:21:7a:a1:50:bd:24:8f:ad:35:9d

Issuing Certificate URL: http://www.igc.education.fr/Infrastructures.crt

Revocation information

CRL Distribution Point: http://crl1.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl2.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl3.igc.education.fr/Infrastructures.crl

Check the revocation status for certificate sepia2.ac-reims.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sepia2.ac-reims.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ac-reims.fr

(limited to 100 certificates)
ent.clg-arcis.ac-reims.fr
recette-jalladdin.ac-reims.fr
webcours.clg-grandpre.ac-reims.fr
ent.lp-argonne.ac-reims.fr
ent.clg-langevin.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
apache-extranet-t.ac-reims.fr
webcours.clg-pont-ste-marie.ac-reims.fr
partage.ac-reims.fr
web2.ac-reims.fr
php71-dev.in.ac-reims.fr
lyc-oehmichen.ac-reims.fr
php72-dev.in.ac-reims.fr
sympatic.ac-reims.fr
sepia.ac-reims.fr
ent.clg-signy-petit.ac-reims.fr
note.lyc-givet.ac-reims.fr
webmail.ac-reims.fr
webcours.clg-aix-en-othe.ac-reims.fr
ent.clg-george-sand.ac-reims.fr
webcours.clg-george-sand.ac-reims.fr
demo-envole.ac-reims.fr
lp-diderot.ac-reims.fr
webcours.clg-le-noyer-marchand.ac-reims.fr
sepia2.ac-reims.fr
sepia2.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
wheb.ac-reims.fr
hesia.ac-reims.fr
atlantique.ac-reims.fr
wordpress1.ac-reims.fr
ent.clg-delafontaine.ac-reims.fr
ent.clg-nouvion.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
sympatic.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
note.lyc-la-fontaine-du-ve.ac-reims.fr
ovidentia.ac-reims.fr
webmail.ac-reims.fr
ent.clg-vouziers.ac-reims.fr
formation-envole.ac-reims.fr
ent.clg-juniville.ac-reims.fr
smtps.ac-reims.fr
webcours.clg-portier.ac-reims.fr
apache-extranet-t.ac-reims.fr
ent.clg-mace.ac-reims.fr
web2.ac-reims.fr
webcours.clg-chaource.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
dialog.ac-reims.fr
ent.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
atlantique.ac-reims.fr
ent.lyc-edouard-herriot.ac-reims.fr
webclasseur.ac-reims.fr
ocean.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
smtps.ac-reims.fr
ent.clg-belgrand.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-mery.ac-reims.fr
spirale.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lp-simone-veil.ac-reims.fr
clg-bastie.ac-reims.fr
webcours.clg-vireux-wallerand.ac-reims.fr
extranet.ac-reims.fr
webclasseur.ac-reims.fr
ent.clg-vendeuvre.ac-reims.fr
sepia.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lyc-edouard-herriot.ac-reims.fr
piatest.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
wheb.ac-reims.fr
ent.clg-rimbaud.ac-reims.fr
ent.clg-fumay.ac-reims.fr
xxi.ac-reims.fr
lp-diderot.ac-reims.fr
spirale.ac-reims.fr
sitetab3.ac-reims.fr
iwc.ac-reims.fr
bv.ac-reims.fr
ent.clg-juniville.ac-reims.fr
lyc-chagall.ac-reims.fr
ent.clg-raucourt.ac-reims.fr
tage.ac-reims.fr
syndicat.ac-reims.fr
hub-envole.ac-reims.fr
webcours3.ac-reims.fr
iwc.ac-reims.fr
ovidentia.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
lp-simone-veil.ac-reims.fr
ent.clg-vrigne.ac-reims.fr
ent-tournebonneau.ac-reims.fr
ovidentia.ac-reims.fr
ocs-ext.ac-reims.fr
ent.clg-mery.ac-reims.fr

Certificate

The complete raw certificate details for sepia2.ac-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hYtf3XkiUkjK5kKwPFY
544efnTDBebjVza58CC5dN4NKX728BOfGP28mOu4vZb18Nh0qEnHclVoamfA9YLg
60+modTJJZ1uwkQDQc7EN2YFGFNaQrYRqleGtsYbYn1Y22IIQlaxVQykA+TExXEF
SZUdnElJokIAVmFnn0KpAFe20ch8PzqygN9ypeqeTHr/MmVtUERMeDkSXoK+xVIM
k2jQypgqVB3ZQcs+Di4uBxpU412UUasS6QkhIeX1+ilRbJrrtc11z2cl0Ptek+DS
d5aXJ9Oaq4zoZPe58+m+vDH5f7vMdVSIxjveu2uQQTA3uQlmANnwjYNeOE//0LfS
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274055548780373481362476171330682405644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere education nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Infrastructures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-23 07:44:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-23 07:44:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere Education Nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sepia2.ac-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30560606046146790287538940812221136374822841901309248037163127443744940436724619257858369705821773635429537404035483884371761084909544970262971571943186643864362886197921146661894232323966305333377581403439721076407099718309096688519106676094512348649491278573334910126505913664854518529415594472673058264058410399040974833470464602082139900974295352762582815051626644924884042790094917307204130195820599491564588341610087618150281993199677286976975265750047035601963890858924345199464952075623915457701300148364627669587784114234850117277974281277048097452469670489921171219179159147772520666335618706870374594237011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.igc.education.fr/Infrastructures.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be38227f7246a9d684159fd5c8287f5cb30220cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.20326.69.1.1.4.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
							4155544f5f47454e4552415445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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