peg.saint-gobain.com

- COMPAGNIE DE SAINT-GOBAIN S.A -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:56:b7:a7:16:35:70:cd:24:60:44:f6:97:bb:25:a2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMPAGNIE DE SAINT-GOBAIN S.A

Organization: COMPAGNIE DE SAINT-GOBAIN S.A
Organization unit: SG DSI Groupe DAG
Locality: Courbevoie
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:b7:a7:16:35:70:cd:24:60:44:f6:97:bb:25:a2
Serial Number (int): 4437946436122626906355958511933531554
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0e:a0:01:95:90:df:b1:58:a5:20:1e:c2:89:7a:ce:48:94:d8:d4:9a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a2:6c:3e:a4:b6:2a:a4:20:79:50:be:cd:fa:ae:1a:ac:01:f0:db:6b
Fingerprint (sha256): 13:09:a2:05:71:94:10:93:d9:ee:ba:3c:e1:18:f1:e7:3f:45:cf:43:eb:d3:32:15:c7:20:f1:66:03:87:be:cc

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate peg.saint-gobain.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peg.saint-gobain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

peg.saint-gobain.com
www.peg.saint-gobain.com

Other certificates including the domain name saint-gobain.com

(limited to 100 certificates)
imperva.com
mobilemail2.saint-gobain.com
imperva.com
www.chartercampaign.saint-gobain.com
*.extranet.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.saint-gobain.com
www.saint-gobain.com.tr
pprugmobileservice.saint-gobain.com
bimlibrary.saint-gobain.com
www2.plastics.saint-gobain.com
imperva.com
design-challenge.saint-gobain.com
ppmobilemail.saint-gobain.com
boost.glass.saint-gobain.com
multimedia.newsletter-im.saint-gobain.com
incapsula.com
store.processsystems.saint-gobain.com
*.website4sg.saint-gobain.com
mail5.saint-gobain.com
gec.saint-gobain.com
bimauthorization.saint-gobain.com
surveys.saint-gobain.com
www.blackpool-powertools.co.uk
incapsula.com
customersmdm-ceramics-int.saint-gobain.com
employee.saint-gobain.com
prosource.app.saint-gobain.com
uat.valueplus.saint-gobain.com
imdf-userguide.im.saint-gobain.com
securelogin.saint-gobain.com
*.fts.saint-gobain.com
www.saint-gobain.fr
www.repairservices.sefpro.com
pprugmobileapps.saint-gobain.com
incapsula.com
boost.sekurit.saint-gobain.com
www.saint-gobain.com
fr-partners.ras.saint-gobain.com
www.bearings.saint-gobain.com
valmobilemailpki.saint-gobain.com
valrugmobileapps.saint-gobain.com
mobilemail2.saint-gobain.com
www.refractories.saint-gobain.com
partners.weber.saint-gobain.com
www.bearings.saint-gobain.com
imperva.com
exch.saint-gobain.com
business-challenge-2018.saint-gobain.com
imperva.com
valrugmobileapps.saint-gobain.com
api.o365guestaccessreview.saint-gobain.com
midco.saint-gobain.com
sip.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
sga-userguide.im.saint-gobain.com
mail6.saint-gobain.com
catalog.biopharm.saint-gobain.com
store.saint-gobain.com
api.cockpit.saint-gobain.com
uat.cloudgateway.saint-gobain.com
videos.saint-gobain.com
customer-eu.lifesciences.saint-gobain.com
store.processsystems.saint-gobain.com
imperva.com
mail10.saint-gobain.com
benelux-register.saint-gobain.com
go.nordic.saint-gobain.com
mdm-uatsupplier.im.saint-gobain.com
*.fts.saint-gobain.com
catalog.biopharm.saint-gobain.com
*.im.saint-gobain.com
webmail.saint-gobain.com
giws.saint-gobain.com
www2.plastics.saint-gobain.com
*.notilus.saint-gobain.com
surveys.saint-gobain.com
www.saint-gobain.com
valmobilemail.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.bearings.saint-gobain.com
mdm.saint-gobain.com
www.saint-gobain.com
partners.weber.saint-gobain.com
colibri.saint-gobain.com
www.bearings.saint-gobain.com
peg.saint-gobain.com
bimlibrary.saint-gobain.com
easyload.isogypfr.saint-gobain.com
imperva.com
bimlibrary.saint-gobain.com
www.saint-gobain.com.tr
www.blackpool-powertools.co.uk
flyover2019.saint-gobain.com
guest.saint-gobain.com
*.saint-gobain.com
marketing-development.saint-gobain.com

Certificate

The complete raw certificate details for peg.saint-gobain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4437946436122626906355958511933531554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMPAGNIE DE SAINT-GOBAIN S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG DSI Groupe DAG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peg.saint-gobain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730137324609400793415512272926424052150105112957509523148110038560800816123712383610516002219368845226648126085109141636872572960879093611134088749930989467320570507196380704394562513140884752609521626765386807383771064013409743990087703384711297362619364054791033616095618842456320018568131098508019820565078302569643288168725477803249342136433767262804985307343338006881046078398898691412049537276653120579439533493330144691142894635409646188805468272318453264058948038622617403494441008908047774788075358936347206231929942239243418982110171415773352823470618079115287276505116189848905610630044914420206088059105872131770012034725841597932146350526404913474807246481493955584692608360304987358662337815218083015414669880757559305957985749211985722446171434033390722519851287340888754183499995837630602925236625332942106168787709417473862348426840719281154590706489321756463610641644185527513146104382343293359463549324563797719575264011308974835109544995870422445419689330914579341029718036711108981649033643750551411051118486736607014068920183078915370655946863590154889263783134246334384270108130578459935147765806179794813111992103320577547718704843166715442904795041476310526345767972876013906580879895457173596463719317333707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ea0019590dfb158a5201ec2897ace4894d8d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peg.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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