cfa.se.com

- Schneider Electric Industries SAS -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:3d:af:f0:02:de:85:24:50:f8:ea:51:14:74:55:ff was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
Organization unit: Global Operations
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:3d:af:f0:02:de:85:24:50:f8:ea:51:14:74:55:ff
Serial Number (int): 9624894516192658357689039999374480895
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7b:1c:a8:13:39:9d:22:a0:29:e5:d6:38:30:3a:68:0f:bd:3b:9f:a2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 9a:0c:d1:a8:dd:88:05:57:76:3b:de:e3:19:32:a5:4f:4d:19:a0:49
Fingerprint (sha256): 0e:28:da:ce:bc:07:7e:65:b8:1a:02:52:68:4c:d8:bb:df:98:4d:01:30:05:65:1d:33:c7:72:4c:96:cc:3f:ea

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate cfa.se.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfa.se.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfa.se.com

Other certificates including the domain name se.com

(limited to 100 certificates)
cds4.cvent.com
sni61165.cloudflaressl.com
sni61165.cloudflaressl.com
sni199070.cloudflaressl.com
ssl372726.cloudflaressl.com
sni188979.cloudflaressl.com
secure08.lithium.com
secure05.stage.lithium.com
secure08.lithium.com
api.canalverde.se.com
api.se.com
secure08.lithium.com
sni188979.cloudflaressl.com
sip-res.schneider-electric.com
shop.se.com
secure08.lithium.com
secure08.lithium.com
aliases2.schneider-electric.com
mysearch.se.com
ssl256155.cloudflaressl.com
ssl372724.cloudflaressl.com
san-12-s51.tlsprovisioning.exacttarget.com
backend-api.pes-ppr.se.com
aliases6.schneider-electric.com
app.ppr.schneider-electric.com
tic-api-ppr.se.com
sni199070.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
ssl256156.cloudflaressl.com
sni61165.cloudflaressl.com
www.schneider-electric.com
egovlab.eu
myseapi.se.com
www.schneider-electric.com
sni49383.cloudflaressl.com
cdn.canalverde.se.com
www.schneider-electric.com
shop-au.solar.se.com
sni188979.cloudflaressl.com
altivardprqa.se.com
sni199070.cloudflaressl.com
ws-sh2.schneider-electric.com
aliases2.schneider-electric.com
sni61165.cloudflaressl.com
myseuiaas.dev.se.com
uat.nlshop.se.com
mailtrap.uat.nlshop.se.com
sca-uat.se.com
www.schneider-electric.com
shop.se.com
shop-th.se.com
san-16-s51.tlsprovisioning.exacttarget.com
www.kuvert.se.com
se.com
schneider-electric.com
sni168267.cloudflaressl.com
opticon.se.com
keeperautomator.se.com
schneider-electric.com
suzuki.se.com
sklady.se.com
schneider-electric.com
aliases8.schneider-electric.com
confluence.se.com
sni199070.cloudflaressl.com
secure05.stage.lithium.com
aliases5.schneider-electric.com
*.dev.se.com
marathondeparis.se.com
admin.projects-ru.se.com
api.dev.se.com
sni188979.cloudflaressl.com
schneider-electric.com
solar.se.com
calendar-ru.se.com
aliases2.schneider-electric.com
lighthou.se.com
sni168267.cloudflaressl.com
sni61165.cloudflaressl.com
ssl372726.cloudflaressl.com
uat.nlshop.se.com
wesop-fr.se.com
aliases5.schneider-electric.com
shop-de-eu.solar.se.com
tic-api-ppr.se.com
cds4.cvent.com
mysearch.se.com
sni49383.cloudflaressl.com
confluence.se.com
eshop.se.com
sni49383.cloudflaressl.com
shop-au.solar.se.com
schneider-electric.com
mule.se.com
ssl258869.cloudflaressl.com
myarcfm.schneider-electric.com
mcc-api-ppr.se.com
sni238385.cloudflaressl.com
cfa.se.com

Certificate

The complete raw certificate details for cfa.se.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWnhIkHirftcuD0NaCU4
u7BGC7zI+lto+dQTqY/VO0MOcTttxrm0ImQ44rt49NVxbM9wpngoVItlwooENRff
qoR/stBa+iV9n7nQmDXRJe36nAjufueqq7TjSpz07SDZv5HVgRaqZvXsdO+XyRHG
vuawcFB/aih2YAMBAB8GqG832unxgtOyMNMXrIhedWDxo8TOHZsTPstvF0JhVH9y
o+gLynB2Tuj6ZFIwQBKGA431D7aRh4Zk9Ry8Dm3RkRw2Xsx5CIYsVgOU+4VopJAV
BolDleATva+S5VltGYgwhwzUXCKdsCOnOxlrcQbdvowyk9ph4uWwexfc83AEUOVE
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9624894516192658357689039999374480895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfa.se.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23406297511082926438474114928538962019047081524258210639204118491941153161962767866131401684457365079618406635603487225356133674407186694078894118982969328740563360943753638065752521294645394050730624107914225400680523947075632895833797007391194636349967111714933466127094605080599712817039644606509276257180368341166033394793227989654944412518439963028451518530986017330941099761516392997274093094284449450638130831433610793411185621281561822800402581981129617625345745729963388654427293661707852373288763119674581164423099736482432364983935118091217890405726789695647190823795474234744703313528039973329138094523481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1ca813399d22a029e5d638303a680fbd3b9fa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.se.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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