agence.voyages-sncf.com

- VSC TECHNOLOGIES -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:02:fd:10:17:49:f5:8b:ad:d8:1d:34:3f:e9:dc:c8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VSC TECHNOLOGIES

Organization: VSC TECHNOLOGIES
Locality: Puteaux
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:fd:10:17:49:f5:8b:ad:d8:1d:34:3f:e9:dc:c8
Serial Number (int): 4003201305559707741950470617685417160
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d3:9e:4f:99:be:71:9c:98:90:75:4f:a7:3a:f0:b8:ce:e5:86:d9:1a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 04:02:9e:82:24:ea:ae:e9:02:5b:12:a3:9e:e0:72:b5:ec:c1:38:ba
Fingerprint (sha256): 10:45:65:ad:0e:14:8a:68:db:37:49:ae:c8:d7:c4:eb:51:b0:af:9a:08:0f:a3:97:2e:b1:42:e2:3b:b2:b7:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate agence.voyages-sncf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agence.voyages-sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agence.voyages-sncf.com
agence-voyage.oui.sncf

Other certificates including the domain name voyages-sncf.com

(limited to 100 certificates)
*.carmen.sncf.fr
secure.uk.voyages-sncf.com
www.voyages-sncf.com
akiovsc.voyages-sncf.com
offre-connect.voyages-sncf.com
cinemagraph.voyages-sncf.com
www.expedia.com
acquia-sites.com
jeu.voyages-sncf.com
acquia-sites.com
acquia-sites.com
ctrmgr.voyages-sncf.com
sstats.voyages-sncf.com
recette.bagages.voyages-sncf.com
owa.voyages-sncf.com
jeu.voyages-sncf.com
t.secure.be.voyages-sncf.com
voxpopsoralhistory.com
t.voyages-sncf.com
tgvpop.voyages-sncf.com
acquia-sites.com
admins.voyages-sncf.com
jeu.voyages-sncf.com
acquia-sites.com
rec2akiodv.voyages-sncf.com
*.voyages-sncf.com
acquia-sites.com
secure.analytics.voyages-sncf.com
formulaire.vsct.fr
offre-connect.voyages-sncf.com
www.programmefid.com
acquia-sites.com
adhesion.monforfaitannuel.voyages-sncf.com
spectacles.voyages-sncf.com
*.api.voyages-sncf.com
abonnement.voyages-sncf.com
acquia-sites.com
secure.ru.voyages-sncf.com
www.org.destinations.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
acquia-sites.com
secure.voyages-sncf.com
*.api.voyages-sncf.com
jeu.fr.voyages-sncf.com
www.expedia.com
client.es.voyages-sncf.com
abonnement.voyages-sncf.com
www.expedia.com
formulaire.vsct.fr
www.expedia.com
bagages.voyages-sncf.com
interrail.voyages-sncf.com
voyages-sncf.com
jeu.fr.voyages-sncf.com
jeu.eu.voyages-sncf.com
secure.analytics.voyages-sncf.com
jeu.fr.voyages-sncf.com
croisieres.voyages-sncf.com
t.voyages-sncf.com
ouiwork.open.voyages-sncf.com
kli.uk.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
tls.automattic.com
admins.voyages-sncf.com
t.voyages-sncf.com
www.expedia.com
secure.analytics.voyages-sncf.com
cinemagraph.voyages-sncf.com
cinemagraph.voyages-sncf.com
billetprime.voyages-sncf.com
ouiwork.open.voyages-sncf.com
ouiwork.open.voyages-sncf.com
*.preprod.voyages-sncf.com
acquia-sites.com
integration.adhesion.monforfaitannuel.voyages-sncf.com
jeu.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
cinemagraph.voyages-sncf.com
abonnement.voyages-sncf.com
juniorcie.voyages-sncf.com
juniorcie.voyages-sncf.com
adhesion.monforfaitannuel.voyages-sncf.com
acquia-sites.com
*.voyages-sncf.com
secure.en.voyages-sncf.com
kli.uk.voyages-sncf.com
sstats.voyages-sncf.com
facebook.voyages-sncf.com
ventes.juniorcie.voyages-sncf.com
acquia-sites.com
www.expedia.com
acces2.voyages-sncf.com
www.voyages-sncf.com
cinemagraph.voyages-sncf.com
offre-connect.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
secure.ru.voyages-sncf.com
t.voyages-sncf.com

Certificate

The complete raw certificate details for agence.voyages-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3QEBpi45dR+0UYEz0KD
ubjgNtePhfNWmjd3LSv3Gq8r6PH2N/IotC9D2V5fNREhdFm3AqC7h8x9X73IVkco
0nh1+nDYzZQR8P597WvJ3ffWEbNGDgqlQmUQuvG4bVScdHopQzOn+i2br4sGhgar
sl644iwzwY9hh95BtFDESOYaYKx1TPXqpNz3Bu9YIt7i9rtJsdgM37lUaUWmxbXv
SNYVwxb4pWQS25Yk9sQU7f3SM0NHtRRKd3lk7Q7h8i0CB8WSE3epXyC7E8K9GBU6
5ZTBJFkJluIVDfVhNyjd6KPm6Pu0Z/3RjQQ7MF3lWSbKxwLtQ17fqHnwBLXBjceE
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4003201305559707741950470617685417160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Puteaux'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VSC TECHNOLOGIES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agence.voyages-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24673678954929015783787140898796409442378064234912279184910536421533530810326256416134786703634571133407425751252144711535887842629880736583417034271358465236424243711025586124475948928796062089470145139100129706135429785669217882168636187181769349638722440530640360949143955383714082245257794976886989377778611616619163013454130118668858800614851061214383708787240486378611613995187575722541923554157528472093301492073106119164622443354865158297221485660443931244817095279173893957344240996065465407127916490773753534288946847592596308257077552292572063846791839251189245915354352215593072152939383876033645080183839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d39e4f99be719c9890754fa73af0b8cee586d91a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agence.voyages-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agence-voyage.oui.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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