nps.portal.prod.veolia.com

- VEOLIA ENVIRONNEMENT -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 68:8c:7d:39:d8:18:85:eb:ec:60:f4:09:84:cc:c7:1e was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

VEOLIA ENVIRONNEMENT

Organization: VEOLIA ENVIRONNEMENT
Organization unit: VEOLIA ENVIRONNEMENT
State / Province: PARIS
Locality: PARIS
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:8c:7d:39:d8:18:85:eb:ec:60:f4:09:84:cc:c7:1e
Serial Number (int): 138969173005910255189701687035401389854
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 29:5a:34:07:b7:92:0b:07:42:22:74:23:62:4a:d2:b9:fc:d8:10:e0
Fingerprint (sha256): 0d:13:77:54:62:35:44:1e:21:ee:66:1e:51:66:43:58:79:d3:c8:73:70:00:b0:98:f8:1f:46:74:f0:b6:76:d3

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate nps.portal.prod.veolia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nps.portal.prod.veolia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nps.portal.prod.veolia.com

Other certificates including the domain name veolia.com

(limited to 100 certificates)
globalreport.veolia.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
teammate.veolia.com
ssl5.ipaper.io
sni.cloudflaressl.com
pp-nova.veolia.com
aub.sbc1.veolia.com
ssl4.ipaper.io
bms.fmis.veolia.com
vesta.veolia.com
ads.veolia.com
ssl2.ipaper.io
www.veolia.com
v0-vr2wd.agora.awsvesa.veolia.com
nextfiles-archive.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
*.campus.veolia.com
ssl.ipaper.io
gorecapp.com
filetransfer.veolia.com
ssl1.ipaper.io
ssl5.ipaper.io
www.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
tidemark-upweb-sbx.awsvetech.veolia.com
ssl.ipaper.io
ssl.ipaper.io
nps.proprete.prod.veolia.com
www.campus-questionnaire.veolia.com
ssl2.ipaper.io
ssl.ipaper.io
sni.cloudflaressl.com
tidemark-upweb-ppd.veolia.com
*.awsvesa.veolia.com
acquia-sites.com
ssl.ipaper.io
www.campus-questionnaire.veolia.com
acquia-sites.com
odyssee.veolia.com
ssl4.ipaper.io
ssl1.ipaper.io
apm.veolia.com
bms.fmis.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
apm.veolia.com
finaris.veolia.com
*.awsvesa.veolia.com
next.veolia.com
qa-ipaas.veolia.com
ssl3.ipaper.io
nextwebdev.veolia.com
reporting01.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
ssl5.ipaper.io
ssl.ipaper.io
ssl1.ipaper.io
rpa.veolia.com
teammate.veolia.com
ssl6.ipaper.io
acquia-sites.com
www.veolia.com
tls.automattic.com
acquia-sites.com
ssl.ipaper.io
acquia-sites.com
ssl1.ipaper.io
ssl.ipaper.io
portail.diag-server.veolia.com
rec-crm-contact.veolia.com
datalease-sbx.awsvetech.veolia.com
ads.veolia.com
bsh2o.veolia.com
ssl.ipaper.io
acquia-sites.com
*.industries.veolia.com
nextsft.veolia.com
sni.cloudflaressl.com
www.cat.veolia.com
globalreport.veolia.com
dss.veolia.com
*.ipapercms.dk
www.campus-questionnaire.veolia.com
sbc1.veolia.com
ssl1.ipaper.io
nps.energie.prod.veolia.com
ssl3.ipaper.io
vac-import.veolia.com
ssl4.ipaper.io
nps.portal.prod.veolia.com
ssl4.ipaper.io
ssl4.ipaper.io
acquia-sites.com
ssl2.ipaper.io
crm-contact.veolia.com

Certificate

The complete raw certificate details for nps.portal.prod.veolia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQBeqLhYUYC9qg6j5OXO
Z96/7f4b1zTVgnUgt5xXeK2kBlh+EKqAG5BLe59JIeSlT4UjSPtkOkLlKzLZSXyv
B55UgMh/WLmw7RUQRbhqM4Y0ylG/in5wAwIruw6VimhW1N4QZu+F83pxqxE+hOXI
yf/UauyreTR9aJOA26Ww4J8xklhX/XnifEvt0dkLuTgRUjYvWHf++0rBHlrW1CqA
I6/7jiw+HuEWfkzYiPJYW1tcxCuGZ2RtQ4OqZTU5hOVGyRyt4G5b4O0+x6w8MKs5
6DgaCUe9HJL/n1jh+J2GVqumYIJlaU6caSKyRmsI53IwXZHMWS9fg3z6FDA7Thgj
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138969173005910255189701687035401389854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VEOLIA ENVIRONNEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VEOLIA ENVIRONNEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'nps.portal.prod.veolia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23354268755141252529867533437853449233349920388766696029798344548526492042743864609745895460751782239146188984201536645699463711862414754501759613466801697228243211164885440968246951042119023833266662462870842156360363762834498346937103734407711140199976081732255633778202269100531760032440361616610389367907326970801727954548907905598874434728478846328580632191142925527984755822273029536580177150849110360949907185426970493058481070494617520824197483228609462296845218373128013621415192056354057094444404501467445748095665388035631636866177621413442553695699908172029641918926876665496896999605187513319440057377631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.portal.prod.veolia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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