www.atanar.net

- Atanar Technologies -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:07:9f:4e:ab:96:b1:e7:0f:79:15:9b:73:92:c8:f8 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Atanar Technologies

Organization: Atanar Technologies
Locality: Malakoff
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:07:9f:4e:ab:96:b1:e7:0f:79:15:9b:73:92:c8:f8
Serial Number (int): 9344173184531927305514599028056312056
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: aa:dd:42:f2:4e:b1:89:34:47:7b:47:5e:a1:7d:e8:ce:91:f4:d1:5d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 82:6c:ca:50:06:bc:52:9d:08:21:6d:35:db:b4:6d:ae:aa:45:97:fe
Fingerprint (sha256): 14:51:c6:4c:8f:26:93:76:e4:c6:e1:07:02:e5:d2:60:3b:fa:e7:13:1e:5b:a8:6d:4e:85:a7:af:da:c3:3e:f8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate www.atanar.net

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.atanar.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.atanar.net
cdn1.dlp-media.com
cdn2.dlp-media.com
cdn3.dlp-media.com
cdn4.dlp-media.com
cdn5.dlp-media.com
opm-dnx.disneylandparis.com
cdn.tagcommander.com
crisis.dlp-media.com
api.weekendesk.com
preprod-api.weekendesk.com
my-run.disneylandparis.com
my-run.disneylandparis.fr
book-run.disneylandparis.com
book-run.disneylandparis.fr

Other certificates including the domain name atanar.net

(limited to 100 certificates)
www.atanar.net
lab.atanar.net
www.atanar.net
www.atanar.net
lab.atanar.net
flush.atanar.net
fstly.atanar.net
labo.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
monitoring.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
api.atanar.net
api.atanar.net
zencloud.atanar.net
labo.atanar.net
www.atanar.net
lab.atanar.net
www.atanar.net
lab.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
labo.atanar.net
zentoo.atanar.net
www.atanar.net
www.nissan-cdn.net
zencloud.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
support6.cdnetworks.net
www.atanar.net
menu.atanar.net
www.atanar.net
www.atanar.net
labo.atanar.net
www.atanar.net
api.atanar.net
www.atanar.net
www.atanar.net
api.atanar.net
www.atanar.net
www.atanar.net
lab.atanar.net
zencloud.atanar.net
support6.cdnetworks.net
www.atanar.net
zentoo.atanar.net
www.atanar.net
media.frequencemedicale.com
www.atanar.net
www.atanar.net
zentoo.atanar.net
www.atanar.net
www.atanar.net
monitoring.atanar.net
www.atanar.net
api.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
api.atanar.net
api.atanar.net
www.atanar.net
tata.atanar.net
intra.atanar.net
www.atanar.net
lab.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
menu.atanar.net
flush.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net
api.atanar.net
www.atanar.net
www.atanar.net
www.atanar.net

Certificate

The complete raw certificate details for www.atanar.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiXvXC5fydOi4XCc9MPU
j3rSFTKNkRifs/18aNU2oN94V/tLACE0NGHHbdxKZsfeTNhxtTVCs/gh3ERIyFl2
V+FlVJcUqDq6iIuqAqcS8e/y8ilmgYe4/yHjbA5MojEx+/kgKX/aBsGUqGuklImx
gRnvOLjouwyqqQNAEDr90MQglM/lov7fiMxkFcNioRcGppvBV0tQevGOlfb9R4TP
bc45zIkSZXSaUcsykAgGhgUYCNOU6YTpanddgKp98jt2E3jzCPY9tfuc8c6o/LDy
RfO3dXavtWBpWxHbN/5D7fKNCrn57d0ru/rUSsKnpJrM3FWRZRJbocyZMQXL9Wt2
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9344173184531927305514599028056312056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Malakoff'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atanar Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.atanar.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22489124729816347975597842966519658692562915201915164970231382426882484497745790338797106232123680220175885631800323463789585032474257008207854765631694233488662144684586803908609889729983246462144078277998050881232610911534988600262362775697525361535322971570945705133733079703886246061586985875367357541109347644926940489979471276398577526108347724629489921704692121521630829728525289879413183189738744837736165634067159973010422395145383187548852820634221030147288592094860066972935253912651242476251041317878745241882066605444424767613509732817491949149044844317850286831207574940126872091269792017367615876593161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aadd42f24eb18934477b475ea17de8ce91f4d15d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (355 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atanar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn5.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opm-dnx.disneylandparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tagcommander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisis.dlp-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weekendesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-api.weekendesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-run.disneylandparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-run.disneylandparis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-run.disneylandparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-run.disneylandparis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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