instn.cea.fr

- COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 1c:3f:94:0f:c9:51:7f:bb:92:cc:7b:9c:39:7c:67:02 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES

Organization: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:3f:94:0f:c9:51:7f:bb:92:cc:7b:9c:39:7c:67:02
Serial Number (int): 37548501631414129909233402594096604930
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 48:5e:c0:92:aa:0f:6c:39:b4:86:36:05:8c:06:9f:dd:c9:e8:ea:31
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0d:80:5d:8b:4d:07:e8:f1:0d:59:bd:38:5a:6d:ec:3d:32:91:4a:d9
Fingerprint (sha256): 0e:fb:2a:64:48:4e:b8:15:cd:88:23:23:4f:14:f5:4b:cb:12:4b:51:cb:20:bc:b6:1b:ae:ed:c4:87:04:b1:64

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate instn.cea.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for instn.cea.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

instn.cea.fr

Other certificates including the domain name cea.fr

(limited to 100 certificates)
joliot.cea.fr
projet-si-map.cea.fr
projet-sip.cea.fr
drf-internet.extra.cea.fr
p-shfj-gera-bdd.partenaires.cea.fr
sogreen-project.cea.fr
veille-dem.cea.fr
compta-dev.admin.ccc.cea.fr
lha-dmt2.cea.fr
projet-thermacem.cea.fr
infos-salaries.cea.fr
www-centre-saclay.cea.fr
agueil.eole.ccc.cea.fr
naiades-project.cea.fr
maintenance-digiteo.cea.fr
irig.cea.fr
q4-hilumi.cea.fr
www.mobilite-interne.cea.fr
afh.cea.fr
ged-extra-sacm.cea.fr
eu-aims.cea.fr
vpn.cea.fr
drf-upsac.cea.fr
hg2epx.cea.fr
vpn.cea.fr
projet-li2cem.cea.fr
montchretien02.admin.ccc.cea.fr
www.theses-postdocs.cea.fr
baudelaire02.admin.ccc.cea.fr
sarmenti-proposal-project.cea.fr
letsense.cea.fr
qflag.cea.fr
vpn.cea.fr
cirse-smtp-out.extra.cea.fr
talk3.extra.cea.fr
afh.cea.fr
events-list.partenaires.cea.fr
lotus.cea.fr
activage-intervention.cea.fr
communaute-lacrs.cea.fr
www-plat4m.cea.fr
anastasia2-project.cea.fr
instn.cea.fr
modsecaero.cea.fr
talents.cea.fr
e-i2ir-test.cea.fr
www-ged-demeterres.cea.fr
herschel-project.cea.fr
wiki.admin.ccc.cea.fr
bioproj.cea.fr
madmax.cea.fr
partage-dpad.cea.fr
chat.admin.ccc.cea.fr
gopv-project.cea.fr
www.emploi.cea.fr
webmail-e.cea.fr
transmil-project.cea.fr
integral-project.cea.fr
projet-li2cem.cea.fr
webmail-ext.qualif.cea.fr
sfcg-nuvia.cea.fr
spica-b-bop.cea.fr
rapport-scientifique-leti.cea.fr
projet-optifroid.cea.fr
integral-project.cea.fr
p-i2ipp-racine-collab.qualif-p.cea.fr
bts-frama-c.cea.fr
datadrf.cea.fr
webconfgre.cea.fr
p-i2i-test.partenaires.cea.fr
imagen2.cea.fr
garbin.eole.ccc.cea.fr
modsecaero.cea.fr
nectarcam-irfu.cea.fr
eu-aims.cea.fr
projet-labo-commun-masen.cea.fr
jobs.eurotalents.cea.fr
gouvernance-ca.cea.fr
www-cad.cea.fr
these-is.cea.fr
projet-entech-se.cea.fr
p-i2i-personnes.partenaires.cea.fr
www-leti.cea.fr
qgp-admin.cea.fr
solhyshare-project.cea.fr
compta-rct.admin.ccc.cea.fr
codev-tuleap.cea.fr
jacob.cea.fr
www-fr.ccc.cea.fr
projet-altess.cea.fr
i-id.cea.fr
farou.eole.ccc.cea.fr
com-mar-collab.cea.fr
projet-comepos.cea.fr
cbrn.partenaires.cea.fr
www-cadarache.cea.fr
oaasis.cea.fr
s2lam.cea.fr
www-dmt-rm2-far.cea.fr
phoenix.cea.fr

Certificate

The complete raw certificate details for instn.cea.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe2qJHrnlr5VP7qjmNhU
kRGWyC2SmQtPySF11TdJUwG1EkiyhLfPbDgMaQ0khJxWmAMlivRjkoElHh3AX604
uvs8keOh6JFAejlAFz0Ql6RlYrJhZQF4GFRL2w0lb3WlggxwayeYS651WsFFl9JR
Ty4TpIVWHzN/enOGwnXiO4KhJwqYQp9Tl19mxEhMVHUfO7e+IAly/i9sXZBWpAJ+
/x9zoix2Sv0czUE+GT+qGAlIO76+yzAP1h6BydYA/J3KA+Pj52T2xiu52U4cuPQQ
iKNgn6m80D88EZs2XYcDYaE3BajwGaeu3imMGgUGbk7gHa8w7Gh017U6k6ey0Onq
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37548501631414129909233402594096604930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'instn.cea.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21451470330947117407212216418111370497510541667401702895806544641207986923943134508827459351788027597878016978876529572209989561017110616077531913532640311538541465158196174588929066392955546284938946852485358532572872548733927244622135891387716590307734194583477224178582681604407277774130025089033596669008346607815569436147921997170134821274261035612390909940866753145984522081469889382339189864237524119599523592591022878465025662513184801678447280673540072363155594475532720103792288343149600280460423495744497306538430793374924845236583686224992299038478267558557086142455877043547673593829383812406141629622851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							485ec092aa0f6c39b48636058c069fddc9e8ea31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instn.cea.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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