api.dev.se.com

- Schneider Electric Industries SAS -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:74:61:6b:fe:b3:e6:9f:f1:72:54:88:e5:ef:62:25 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
State / Province: Île-de-France
Locality: Rueil-Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:74:61:6b:fe:b3:e6:9f:f1:72:54:88:e5:ef:62:25
Serial Number (int): 20542702322335400647835983944992383525
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:e4:3b:2b:90:92:2b:f2:01:ca:f0:f7:32:e4:14:fa:be:c0:c5:35
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 64:5a:fd:58:ad:aa:d3:ae:e3:e3:01:fc:35:c3:f3:3f:60:f6:3a:b1
Fingerprint (sha256): 0a:1a:53:fa:84:4f:fc:93:69:79:45:d4:1d:1c:82:e6:d0:74:7c:63:8c:71:42:77:1d:7a:f8:b9:f8:b9:10:da

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate api.dev.se.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.dev.se.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.dev.se.com
api.explore.se.com
api.perf.se.com
api.preprod.se.com
api.qa.se.com
api.sandbox.se.com

Other certificates including the domain name se.com

(limited to 100 certificates)
cds4.cvent.com
sni61165.cloudflaressl.com
sni61165.cloudflaressl.com
sni199070.cloudflaressl.com
ssl372726.cloudflaressl.com
sni188979.cloudflaressl.com
secure08.lithium.com
secure05.stage.lithium.com
secure08.lithium.com
api.canalverde.se.com
api.se.com
secure08.lithium.com
sni188979.cloudflaressl.com
sip-res.schneider-electric.com
shop.se.com
secure08.lithium.com
secure08.lithium.com
aliases2.schneider-electric.com
mysearch.se.com
ssl256155.cloudflaressl.com
ssl372724.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
backend-api.pes-ppr.se.com
aliases6.schneider-electric.com
app.ppr.schneider-electric.com
tic-api-ppr.se.com
sni199070.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
ssl256156.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
egovlab.eu
myseapi.se.com
www.schneider-electric.com
sni49383.cloudflaressl.com
cdn.canalverde.se.com
www.schneider-electric.com
shop-au.solar.se.com
sni188979.cloudflaressl.com
altivardprqa.se.com
sni199070.cloudflaressl.com
ws-sh2.schneider-electric.com
aliases2.schneider-electric.com
sni61165.cloudflaressl.com
myseuiaas.dev.se.com
uat.nlshop.se.com
mailtrap.uat.nlshop.se.com
sca-uat.se.com
www.schneider-electric.com
shop.se.com
shop-th.se.com
san-16-s51.tlsprovisioning.exacttarget.com
www.kuvert.se.com
se.com
schneider-electric.com
sni168267.cloudflaressl.com
opticon.se.com
keeperautomator.se.com
schneider-electric.com
suzuki.se.com
sklady.se.com
schneider-electric.com
aliases8.schneider-electric.com
confluence.se.com
sni199070.cloudflaressl.com
secure05.stage.lithium.com
aliases5.schneider-electric.com
*.dev.se.com
marathondeparis.se.com
admin.projects-ru.se.com
api.dev.se.com
sni188979.cloudflaressl.com
schneider-electric.com
solar.se.com
calendar-ru.se.com
aliases2.schneider-electric.com
lighthou.se.com
sni168267.cloudflaressl.com
sni61165.cloudflaressl.com
ssl372726.cloudflaressl.com
uat.nlshop.se.com
wesop-fr.se.com
aliases5.schneider-electric.com
shop-de-eu.solar.se.com
tic-api-ppr.se.com
cds4.cvent.com
mysearch.se.com
sni49383.cloudflaressl.com
confluence.se.com
eshop.se.com
sni49383.cloudflaressl.com
shop-au.solar.se.com
schneider-electric.com
mule.se.com
ssl258869.cloudflaressl.com
myarcfm.schneider-electric.com
mcc-api-ppr.se.com
sni238385.cloudflaressl.com
cfa.se.com

Certificate

The complete raw certificate details for api.dev.se.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFKBxlvzU217aV3+5+FZ
Xlk7o8xxo/9QTvjl9SIooNr07J37Ivku8qJ9GXRLz7ty2IPVs9sovM5FT6ZImLmN
FiVM8cA+XOSNZfjzM65d6Z0apR+cJwKZoNXv1ZIWda0bH0IwaErvqzRC4rvR0tUM
HWTjdzG3AzvaEH8GafPDOwIh0/+jDxZqhQOQS6qMZQjCkiarLam65fNYgMNqZ6vm
R0VBp7tYT/xlfotwt+UmHXzDDZqWqrao+T0CElT6JiuQY0U6u7Sw7s0R+mtkxkDm
CqDkABo+No1f+nKAAlfcFz3JPFfeBi4Um0vx3mr1kBUIJBJZxdZJ/yaofss6gER/
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20542702322335400647835983944992383525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil-Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.dev.se.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22763580578914755099372562584590390035396076708508635410268949859814875915336703375997501200094441556544354667439886648602018049552277970468781634167244048876945667370926438298857331694092413821547725073583360039965146363569439448575753426458244550141269867073281108233797262434699331181638966278336398396489379349776761765258453095006276279621647929010664989348306606229003986405570006156896581503146915315424342327804736592673287298411889329030457576549362519754801319044438693998522348623406179425066940552814141946212415079951396446777981291180302317917625639766267377576595849055232109942514757182566614318743423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96e43b2b90922bf201caf0f732e414fabec0c535
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.explore.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.perf.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.preprod.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sandbox.se.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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