sei-ael-corse.edf.com

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:27:8a:84:f8:9d:6e:ad:ac:f9:85:f6:ce:0b:71:6a:f9:65 was issued on by KEYNECTIS.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:27:8a:84:f8:9d:6e:ad:ac:f9:85:f6:ce:0b:71:6a:f9:65
Serial Number (int): 1494363997038955094587836427519572543469925
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: e3:84:b7:e6:cf:4d:e7:54:0d:83:9d:82:da:02:df:8d:c8:67:cf:81
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 30:8f:54:00:c5:ac:0d:9c:d6:e0:f5:03:7d:cb:f4:8f:da:4c:83:e7
Fingerprint (sha256): 0c:ac:d5:bd:22:cd:7d:d0:79:d4:15:36:ed:e8:87:e1:b9:58:11:36:73:90:af:6e:80:c6:d3:35:45:15:c6:42


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate sei-ael-corse.edf.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sei-ael-corse.edf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sei-ael-corse.edf.com
sei-ael-guadeloupe.edf.com
sei-ael-guyane.edf.com
sei-ael-martinique.edf.com
sei-ael-reunion.edf.com

Other certificates including the domain name edf.com

(limited to 100 certificates)
entreprises.edf.com
pwa-sso-rbb.edf.fr
sso.edf.fr
pcyintplypdi001.neoprod.edf.fr
autodiscover.intranet.edf.com
entreprises.edf.com
edfenergy-pulse.edf.com
sei-raccordement.edf.fr
one-module.edf.fr
m-visibiliteconso.edf.com
api-particuliers-pp.edf.com
pcydmzplywfe001.intranet.edf.com
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
projetsfondation.edf.com
collab.intranet.enedis.fr
sso-perf.edf.fr
m-particuliers-preprod.edf.com
openx.edf.com
pass-collectivites-preproduction.edf.com
edf.fr
particuliers.edf.com
noeintplypfe002.neoprod.edf.fr
pass-collectivites.edf.com
netkin.eu
pc2fy72t.pcy.edf.fr
publish-pp2-siterc.cie.edf.fr
noedmzplywdi001.intranet.edf.com
partenaires-internet-iq.edf.com
edf.fr
archives.edf.com
sso-rbb.edf.fr
www.edf.com
noeplyaccess01.edf.fr
trophees.edf.com
sei-ael-corse.edf.com
edfpro.edf.com
edf.com
one.edf.fr
edf.fr
sso-iq.edf.fr
fondation.edf.com
noedmzplywdi001.intranet.edf.com
sso-iq.edf.fr
edf.fr
www.clubactionnaires.edf.com
edf.fr
brandcenter-en.edf.com
NOEINTPLYPFE002.neoprod.edf.fr
sso-r7f.edf.fr
ghood.edf.com
about-us.edf.com
ws-affaires-pp.edf.com
pha.edf.com
fondation.edf.com
noedmzplywdi001.intranet.edf.com
pulse.edf.com
sso-r7b.edf.fr
pcyplyaccess01.edf.fr
www.edf.com
PCYINTPLYPFE001.neoprod.edf.fr
rce-partenaires-recette.edf.com
webmail.intranet.edf.com
trophees.edf.com
pcyintplypfe001.neoprod.edf.fr
photocenter.edf.com
pass-collectivites.edf.com
www.edf.com
partenaires.edf.com
edf.com
partenaires-edfetmoi-recette.edf.com
sei-pee-corse.edf.com
noedmzplywfe001.intranet.edf.com
pw1-ssor7a.edf.fr
pcydmzplywdi001.intranet.edf.com
pcyintplypfe002.neoprod.edf.fr
objective2degrees.edf.com
webmail.intranet.edf.com
sso-interne-r7b.edf.fr
api-particuliers-pp.edf.com
m-r7.entreprises.edf.com
netkin.eu
projetsfondation.edf.com
pcyintplypfe001.neoprod.edf.fr
temoignages.fondation.edf.com
m-particuliers.edf.com
noeintplypfe001.neoprod.edf.fr
bundle-20170208-01.sslpw.fr
noeplyaccess01.edf.fr
m.entreprises.edf.com
ssospex.intranet.edf.com
noeintplypfe002.neoprod.edf.fr
collab.intranet.enedis.fr
temoignages.fondation.edf.com
sso-interne-iq.edf.fr
ssospex.intranet.edf.com
temoignages.fondation.edf.com
etreactionnaire.edf.com
netkin.eu
pcyplyaccess01.edf.fr

Certificate

The complete raw certificate details for sei-ael-corse.edf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yP1tJ3AaFXYrVt3ibKm
FWEcTdLo9Avos45FyG4szFSLuF7fHll1h6P+Wg3KAuKvW4N9qlDPYtvfQ9089QfU
rrPzTrH/bAQN8eVKF9ebKdUcEGAbqZt6Iuesrg/OXP9fdl1RLuOi8ojE6PVvZCLX
s/JMtdYZO8MGUf3XVKYxL2tmB/cRfMnSmuweXjGSRAl+mw9nYgvPHyqTqz6wx2cd
SfzaswT4rv1/izej673EOam8ZPnqx4Nx3VQ58Q1f3zZYrdlJk1ceKjPX4ahevrvT
uPtRhzAm5IpF0ZfS8rSdz4wtI26WV33Kb6st03EhAIleMuKvSgW1wZOrKf84f5H/
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494363997038955094587836427519572543469925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-06 15:22:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-07 15:22:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sei-ael-corse.edf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28168874439413323040515332297985380676869551340668633369524958852086223097797101836073636298847123756363567615672260492630192521872103032597713728276445765912340014441293500557676176739346873895945689357898013986556088132708004379174808551042577301014676502107738823440839957616528823682736565570533176990859641204142312563907001028860344633522639932918426302221810108727644031375916055101830958863026469134622520130158012044899399882367197623550930117647033858959470236639143988889505335636920387265667742993447310895192776937081341999641169730086690992602184926411561859135263782797869668903422216007040897735851971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-ael-corse.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-ael-guadeloupe.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-ael-guyane.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-ael-martinique.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-ael-reunion.edf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e384b7e6cf4de7540d839d82da02df8dc867cf81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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