formation.veolia.fr

- VEOLIA Environnement-VE SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:3e:6f:5a:24:aa:8a:de:85:c8:59:5f:fe:d4:36:9b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VEOLIA Environnement-VE SA

Organization: VEOLIA Environnement-VE SA
Organization unit: VEOLIA ENVIRONNEMENT
Locality: Paris
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3e:6f:5a:24:aa:8a:de:85:c8:59:5f:fe:d4:36:9b
Serial Number (int): 17604144839781330814220607199475152539
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f8:16:86:b4:3d:51:2e:3a:bf:ea:15:d2:58:0a:a2:60:13:60:48:9b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): aa:e3:8e:c0:3c:33:ed:2e:a7:39:19:5f:0c:3b:56:ea:ef:e9:75:8f
Fingerprint (sha256): 12:aa:02:98:dd:f5:6d:7a:25:85:1a:04:10:b0:a3:a2:54:57:33:08:6f:1c:75:b3:60:55:0b:92:55:a2:54:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate formation.veolia.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for formation.veolia.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

formation.veolia.fr

Other certificates including the domain name veolia.fr

(limited to 100 certificates)
token.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
acquia-sites.com
www.veolia.com
*.recyclage.veolia.fr
www.veolia.com
hv360.veolia.fr
veolia.fr
sni.cloudflaressl.com
dir-mjk.veolia.fr
acquia-sites.com
www.chroneau.veolia.fr
sni.cloudflaressl.com
hv360.veolia.fr
acquia-sites.com
arcgisp.veolia.fr
sni.cloudflaressl.com
pp-compte-perseau.veolia.fr
energie.hv360.veolia.fr
veoliaeau.fr
rlv.veolia.fr
atlas.hv360.veolia.fr
www.veolia.com
parking-chrysalis.recyclage.veolia.fr
acquia-sites.com
acquia-sites.com
rec-cartocom.veolia.fr
compteurs.hv360.veolia.fr
lineo-national.m-ve.com
analytics.veolia.fr
rec-arcgiss.veolia.fr
mondiag.eau.veolia.fr
energie.hv360.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
simulateur.vedif.eau.veolia.fr
acquia-sites.com
*.recyclage.veolia.fr
rec-monappli.veolia.fr
rec-monacces.veolia.fr
experience.eau.veolia.fr
www.veolia.com
int-chroneau.veolia.fr
simulateur.eau.veolia.fr
energie.hv360.veolia.fr
analytics.veolia.fr
sni.cloudflaressl.com
*.recyclage.veolia.fr
www.veolia.com
acquia-sites.com
*.recyclage.veolia.fr
sni.cloudflaressl.com
formation.veolia.fr
sinistres-litiges.eau.veolia.fr
rec-monappli.veolia.fr
monappli.veolia.fr
bpartner.eau.veolia.fr
dir-proxy-esb.veolia.fr
experience.eau.veolia.fr
rec-monacces.veolia.fr
rec-rlv.veolia.fr
hv360.veolia.fr
vams-tst.m-ve.com
pp-mallette.veolia.fr
rec-rlv.veolia.fr
monportail.veolia.fr
mdm.recyclage.veolia.fr
rec.api.eau.veolia.fr
www.veolia.com
experience.eau.veolia.fr
sni.cloudflaressl.com
acquia-sites.com
acquia-sites.com
energie.hv360.veolia.fr
recette3-travo.veolia.fr
monbureau.eau.veolia.fr
diag-and-drop.veolia.fr
portail-commercial.veolia.fr
int-chroneau.veolia.fr
compteurs.hv360.veolia.fr
www.veolia.com
lettre-veoliaeau.fr
*.energie.veolia.fr
acquia-sites.com
www.veolia.com
simulateur.eau.veolia.fr
pp-portail-commercial.veolia.fr
acquia-sites.com
www.veolia.com
acquia-sites.com
rec-monappli.veolia.fr
simulateur.eau.veolia.fr
acquia-sites.com
sni.cloudflaressl.com
integration-mobilite.veolia.fr
www.veolia.com
www.veolia.com
acquia-sites.com
metropolerouenouest.eau.veolia.fr

Certificate

The complete raw certificate details for formation.veolia.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rdDeqiwuN99jiswqd88
ugyruRPqRT+nRPjvdeq+Z7nb4AvRv00SaGnxSocDIan618C3D958RRhigBsPcqAN
/um6oaL+lfomunCNoxaRvRfe8r5j4BwTsuuSOASqvuwr/8ncD+uBCf+BhWvgyMqJ
2EsGCaFB9Pi227qoiDQhg20AV+v8eLv7BUXUixiK7uXFr0EgbhMJNg3ptxsuWdyo
+KZkBpbOFBsuiVXtUz7ee0aVsqunce7SN07EMmdNVzLfmSmAZSmE/bS/LI67EW5Y
4mmu9zJz/EG61M7CkV9vXdpp3acm10cFDstdZt7Hzz6huKLiL7P/xcQ6pEnHpaPh
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17604144839781330814220607199475152539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VEOLIA Environnement-VE SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VEOLIA ENVIRONNEMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'formation.veolia.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27610321127175723396226834139090906971128862795309110342891597123211212216916992150389842542890818626813363585928524901791767583011237992173274105238414840071364091991895764289201498218732911184922835791378835223456826229221933452041853235321612263526529390282830861763767261474717598001012502828263928953077240476007982456165635803667183698827568938629148157334174468379709478914097069081908595046608315478373918610281211940336816911342252423248465882339836341640936654397178327635628710100138592804446676421617390948435575618264071765388345500219082856374668027436028745576119191112018859875651001079339705088336381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f81686b43d512e3abfea15d2580aa2601360489b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation.veolia.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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