www.soactif.societegenerale.com

- Societe Generale -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4c:0e:03:22:ef:74:cb:50:9a:38:48:ce:fe:a9:ff:12 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Societe Generale

Organization: Societe Generale
Organization unit: IT
State / Province: PARIS
Locality: PARIS
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:0e:03:22:ef:74:cb:50:9a:38:48:ce:fe:a9:ff:12
Serial Number (int): 101094083450767543237112542530804252434
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 08:23:08:a4:03:f1:4b:35:81:14:cb:2b:8b:07:56:5a:8e:49:15:58
Fingerprint (sha256): 09:d3:20:83:92:0a:62:32:91:57:e7:84:0d:f8:93:24:ce:1c:a8:04:e7:98:32:74:e6:ba:60:f2:c1:ae:be:f1

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.soactif.societegenerale.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.soactif.societegenerale.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.soactif.societegenerale.com

Other certificates including the domain name societegenerale.com

(limited to 100 certificates)
h2-imap.societegenerale.com
partners-api.bsc.societegenerale.com
ceros3.map.fastly.net
warrantspushserver.societegenerale.com
parlons-auto.societegenerale.com
cash2business.factoring.societegenerale.com
infact.factoring.societegenerale.fr
jazz-ou-sobrio.societegenerale.com
demo-sgw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
hsharinbox.societegenerale.com
itsat.societegenerale.com
taleo.exit.societegenerale.com
document-de-reference.societegenerale.com
pre1.ebanking.privatebanking.societegenerale.com
privatebanking.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
sso-sogecashweb.societegenerale.com
chatbotrcf.assurances.societegenerale.com
gesop-subscribe.societegenerale.com
webclear.societegenerale.com
filetransfer.hpr.tomf.societegenerale.com
careers.socgen.com
sni.cloudflaressl.com
suite3.securitiesservices.societegenerale.com
homowebclear.societegenerale.com
hsharinbox.societegenerale.com
careers.societegenerale.com
unified-access.societegenerale.com
sgnews.societegenerale.com
san-004.ceros.com
sni.cloudflaressl.com
h-esign.societegenerale.com
coxetnel-oeuffactory.societegenerale.com
seasonsgreetings.societegenerale.com
linstantprive.privatebanking.societegenerale.com
assurances.societegenerale.com
www.equipmentfinance.societegenerale.com
factoring.societegenerale.com
h-taleo.exit.societegenerale.com
www.blackbird.societegenerale.com
ambassadorsday.societegenerale.com
assurances.societegenerale.com
homo.webadmin.societegenerale.com
h-partners-api.bsc.societegenerale.com
homowebsight.societegenerale.com
sni.cloudflaressl.com
*.pinterestceros.com
ceros3.map.fastly.net
sourcing-hub-reporting.societegenerale.com
h-lamatinale.societegenerale.com
san-004.ceros.com
monsieurmadame.societegenerale.com
san-004.ceros.com
hob-isis.societegenerale.com
netkin.eu
Nouveauxmodeles.societegenerale.com
sf-webtocase.societegenerale.com
sogecash-ebics.societegenerale.com
appliactionnaire.societegenerale.com
login.securitiesservices.societegenerale.com
ambassadorsday.societegenerale.com
portail-pca.factoring.societegenerale.com
infact.factoring.societegenerale.fr
san-004.ceros.com
swordphish.cert.societegenerale.com
apps.bsc.aws.societegenerale.com
www.scf-servicing-hom.societegenerale.com
h2-imap.societegenerale.com
immsituadmin.societegenerale.com
careers.socgen.com
getready.societegenerale.com
www.soactif.societegenerale.com
carte-bancaire-gratuite.societegenerale.com
cert.societegenerale.com
innovshare.societegenerale.com
ceros3.map.fastly.net
projects.societegenerale.com
www.scf-servicing.societegenerale.com
suite3.securitiesservices.societegenerale.com
sso-sogecashweb.societegenerale.com
live.societegenerale.com
homo-login.securitiesservices.societegenerale.com
h-unified-access.societegenerale.com
san-004.ceros.com
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
activation.caff.societegenerale.com
jazz-ou-sobrio.societegenerale.com
sni.cloudflaressl.com
dublinportal.societegenerale.com
boxallinclusive.societegenerale.com
ceros3.map.fastly.net
hfilegtw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
seasonsgreetings.societegenerale.com

Certificate

The complete raw certificate details for www.soactif.societegenerale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts7/h8AkcVMZJ7k8XYmm
7FN1zsF27OpYN/IVDyTDzwIifPjMELmwwjl1T68Kq9SyrE1ncfHOgD7kcfS6DVV4
f/WqlxhIPd2tywyfepIGyK2cB5D59HaqvwAAakHfN8ojcPPo8VDxPPELBYWHM20z
3TMKIEcDrHGBOkjIS2bHlJtxPuUmLJMz6+NmEmB1Q1DP7pM5iMLE+OMIZeANb4Tz
t3bnmgJMOPBr2mlRqjlCEIU7hKBqq8YndtuemPmQ9kYImjtiypCXMJ1yQJtpPlBi
dDryg2/R8b9cIqtGMBvarZV56EQIIjd9jeFAJOaNEw5NIbCyGA65BIcoMncVPyf0
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101094083450767543237112542530804252434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.soactif.societegenerale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23077446103425186035181966328638090014989770932933575013478362618820771618599590638466953131638557320393324705362975018740425845458325970946166419024902299239682947338279735559197275484336680519033986696358311072576215486973664721018328073748988042792187498193905892868542076124125295398886864192732468005297694455749910034460705061141512624859142000813745033384523894618679433486906368338163433663684573051599270818769969499947555489274023802018470481830957378891669102162912504477614087892813483875521192058629028429993688485925539472856743161851022731895347597764080480508434768049875158369428244468202126604498051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soactif.societegenerale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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