hesia.ac-reims.fr

- Ministere Education Nationale (MENESR) -

Issued by AC Infrastructures

About this certificate

This digital certificate with serial number 66:9b:99:80:a5:9e:2d:86:1c:8a:90:bf:1a:67:8b:f4 was issued on by Ministere education nationale (MENESR).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministere Education Nationale (MENESR)

Organization: Ministere Education Nationale (MENESR)
Organization unit: 110 043 015
Organization unit: ac-reims
Country: FR

Ministere education nationale (MENESR)

Organization: Ministere education nationale (MENESR)
Organization unit: 110 043 015
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 66:9b:99:80:a5:9e:2d:86:1c:8a:90:bf:1a:67:8b:f4
Serial Number (int): 136389174984264729730453721073307847668
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 41:55:54:4f:5f:47:45:4e:45:52:41:54:45
AuthorityKeyId: be:38:22:7f:72:46:a9:d6:84:15:9f:d5:c8:28:7f:5c:b3:02:20:cb

Fingerprint (sha1): 05:9c:d5:cf:c9:f2:c6:8b:f7:f8:5b:dc:68:67:bd:56:74:b2:a9:85
Fingerprint (sha256): 0a:04:c4:ab:a5:02:cb:ef:ee:00:3d:93:86:54:95:f5:a9:42:7c:56:75:60:01:23:d1:a4:b6:06:df:f1:bf:34

Issuing Certificate URL: http://www.igc.education.fr/Infrastructures.crt

Revocation information

CRL Distribution Point: http://crl1.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl2.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl3.igc.education.fr/Infrastructures.crl

Check the revocation status for certificate hesia.ac-reims.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hesia.ac-reims.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ac-reims.fr

(limited to 100 certificates)
ent.clg-arcis.ac-reims.fr
recette-jalladdin.ac-reims.fr
webcours.clg-grandpre.ac-reims.fr
ent.lp-argonne.ac-reims.fr
ent.clg-langevin.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
apache-extranet-t.ac-reims.fr
webcours.clg-pont-ste-marie.ac-reims.fr
partage.ac-reims.fr
web2.ac-reims.fr
php71-dev.in.ac-reims.fr
lyc-oehmichen.ac-reims.fr
php72-dev.in.ac-reims.fr
sympatic.ac-reims.fr
sepia.ac-reims.fr
ent.clg-signy-petit.ac-reims.fr
note.lyc-givet.ac-reims.fr
webmail.ac-reims.fr
webcours.clg-aix-en-othe.ac-reims.fr
ent.clg-george-sand.ac-reims.fr
webcours.clg-george-sand.ac-reims.fr
demo-envole.ac-reims.fr
lp-diderot.ac-reims.fr
webcours.clg-le-noyer-marchand.ac-reims.fr
sepia2.ac-reims.fr
sepia2.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
wheb.ac-reims.fr
hesia.ac-reims.fr
atlantique.ac-reims.fr
wordpress1.ac-reims.fr
ent.clg-delafontaine.ac-reims.fr
ent.clg-nouvion.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
sympatic.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
note.lyc-la-fontaine-du-ve.ac-reims.fr
ovidentia.ac-reims.fr
webmail.ac-reims.fr
ent.clg-vouziers.ac-reims.fr
formation-envole.ac-reims.fr
ent.clg-juniville.ac-reims.fr
smtps.ac-reims.fr
webcours.clg-portier.ac-reims.fr
apache-extranet-t.ac-reims.fr
ent.clg-mace.ac-reims.fr
web2.ac-reims.fr
webcours.clg-chaource.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
dialog.ac-reims.fr
ent.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
atlantique.ac-reims.fr
ent.lyc-edouard-herriot.ac-reims.fr
webclasseur.ac-reims.fr
ocean.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
smtps.ac-reims.fr
ent.clg-belgrand.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-mery.ac-reims.fr
spirale.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lp-simone-veil.ac-reims.fr
clg-bastie.ac-reims.fr
webcours.clg-vireux-wallerand.ac-reims.fr
extranet.ac-reims.fr
webclasseur.ac-reims.fr
ent.clg-vendeuvre.ac-reims.fr
sepia.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lyc-edouard-herriot.ac-reims.fr
piatest.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
wheb.ac-reims.fr
ent.clg-rimbaud.ac-reims.fr
ent.clg-fumay.ac-reims.fr
xxi.ac-reims.fr
lp-diderot.ac-reims.fr
spirale.ac-reims.fr
sitetab3.ac-reims.fr
iwc.ac-reims.fr
bv.ac-reims.fr
ent.clg-juniville.ac-reims.fr
lyc-chagall.ac-reims.fr
ent.clg-raucourt.ac-reims.fr
tage.ac-reims.fr
syndicat.ac-reims.fr
hub-envole.ac-reims.fr
webcours3.ac-reims.fr
iwc.ac-reims.fr
ovidentia.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
lp-simone-veil.ac-reims.fr
ent.clg-vrigne.ac-reims.fr
ent-tournebonneau.ac-reims.fr
ovidentia.ac-reims.fr
ocs-ext.ac-reims.fr
ent.clg-mery.ac-reims.fr

Certificate

The complete raw certificate details for hesia.ac-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17tsSd7s/F+8Xz4YxDt/
IS8F//f6yL63RFeSGY63JZyyGusgjE9eOiMAu2k2IRWHZp/JsEWJySpXju0UsFzb
eClcdKWG/zwLgLJsjVMjtLv0vIF/4oHZBj4ny0Vh1IZlO4/grBwJBXIXDoFTmPVY
cg+xw7Y7xLtqFau+qcSZxEAxx3MBGqIbL3M4cAgf756ktf9w48k4j4A8RNMwJPLg
VY9mjjSHNwuRBEYdwqd/tf6Zlog0Y1IAxIdTuV8nAzZys3cIcrAbaTbwGtVDft3e
lfVrQ6nHk027Mt1X5DLPsWmdbmFzDSkrjl9mPu0QPliiQGhZPZfLi/g3HWwveAXa
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136389174984264729730453721073307847668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere education nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Infrastructures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-22 13:39:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 13:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere Education Nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hesia.ac-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27233657294682010693226436043048018224325527222289572631664349364831376092696818788588092305807875972759782692865846843020189109368363294367009748440348870520691615396126202720134480223968778949048500234892550144805250687709393216775432315537340738483454990733941062675395880260466777652393857194334065854169439425204358175829032921238503156729771236602147868235184313482203658329686659676191389665635078712337712148465202932042026061415101971701583295325032237828828546162091041913853719419006115195177945436675112788507871856667380037710186716610126192641914622524699424318843564066156746624871610976349947301321341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.igc.education.fr/Infrastructures.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be38227f7246a9d684159fd5c8287f5cb30220cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.20326.69.1.1.4.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
							4155544f5f47454e4552415445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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