preprod-apies-np.sncf.fr

- SNCF -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 61:4f:f1:81:0c:1c:f6:52:42:b3:c7:11:ba:b7:8a:06:54:8b:dd:48 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SNCF

Organization: SNCF
State / Province: Seine-Saint-Denis
Locality: SAINT DENIS
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 61:4f:f1:81:0c:1c:f6:52:42:b3:c7:11:ba:b7:8a:06:54:8b:dd:48
Serial Number (int): 555554901614032356350873039601991222502307388744
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5c:a0:20:9b:75:71:7a:cd:01:d2:14:dc:66:e3:fe:73:d3:1a:8b:86
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): e2:a2:7f:a8:5a:94:b9:8a:aa:51:b0:f2:d3:88:16:9d:b1:16:d0:a4
Fingerprint (sha256): 15:4b:c9:8a:a3:7f:60:cc:1f:5b:03:1c:6b:44:df:c4:ac:d5:29:3d:53:73:c8:2d:63:60:e0:71:8f:63:5a:97

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate preprod-apies-np.sncf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preprod-apies-np.sncf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preprod-apies-np.sncf.fr

Other certificates including the domain name sncf.fr

(limited to 100 certificates)
pre-atlas-travaux.sso.reseau.sncf.fr
*.carmen.sncf.fr
octave-api-dev.sncf.fr
www.EME-portailSSO-sncf.com
*.apps.eul.sncf.fr
vdixenpilote.sncf.fr
cert00089-azurecdn.akamaized.net
formtractiontv.sncf.fr
*.sncfconnect.com
rhobs-archives-dev.sncf.fr
smartoffice.sncf.fr
seminaire-rh-2017.sncf.fr
seminaire-rh-2017.sncf.fr
postprod-pcs-reponse.reseau.sncf.fr
test-slan.sncf.fr
resultats-labo-paris.sncf.fr
cypres-api-int.sncf.fr
matomo.fd.sncf.fr
sncf.com
pmad.reseau.sncf.com
int.auth.sso.reseau.sncf.fr
sncf.com
mattv.sncf.fr
sts.commun.ad.sncf.fr
alerte-transilien.sncf.fr
dev-prospectus.sncf.fr
orion-connect-form.sncf.fr
accessibilite.sncf.com
sources.fd.sncf.fr
monacademie.sncf.fr
pdvf-rec.sncf.fr
cert00089-azurecdn.akamaized.net
robustest-cerbere.dgexsol.sncf.fr
postprod-fit.reseau.sncf.fr
s2if-gie.sncf.com
cert00089-azurecdn.akamaized.net
preprod-pcs-reponse.reseau.sncf.fr
mestrainsdhier.fd.sncf.fr
monacademie.sncf.fr
*.fret.sncf.com
localiter.sncf.fr
bonneannee.sncf.fr
test-slan.sncf.fr
catalogue-formation-fret.sncf.fr
resultats-labo-lyon.sncf.fr
preprod-apies-np.sncf.fr
netkin.eu
laboutiqueeco.sncf.fr
quizrh.sncf.fr
cashsolutions.sncf.fr
enquete-client.dgii.sncf.fr
form-papact.prevention.sncf.fr
*.ase-01-e2-pr.cloud.sncf.fr
poc.portail-citrix.reseau.sncf.fr
moter-recette.sncf.fr
netkin.eu
recette1.ticketing-sncf.vsct.fr
mon-assistant-visuel-int.sncf.fr
veillesst.prevention.sncf.fr
sncfcontact.sncf.fr
form.prevention.sncf.fr
www.srtpf.fr
siph.sso.reseau.sncf.fr
viveletrain-forumemploi.sncf.fr
www.tech.sncf.fr
declic-for.infra.sncf.fr
*.api-np.sncf.fr
*.accessly.divadigital.sncf.fr
int-auth.sso.reseau.sncf.fr
contact-contravention-integration.sncf.fr
recette1.ticketing-sncf.vsct.fr
diva.sncf.fr
dev-apies-np.sncf.fr
matomo.fd.sncf.fr
*.dashboardly.divadigital.sncf.fr
preprod-apies-np.sncf.fr
netkin.eu
hospitalite-france2019.sncf.fr
themis-regles-dev.sncf.fr
design-bootstrap.sncf.fr
mestrainsdhier.fd.sncf.fr
netkin.eu
g11-ref-optimum.sncf.fr
snr.infra.eva.sncf.fr
preprod-stockfds-webapi.prevention.sncf.fr
dev-salto-iamapp.sncf.fr
recette1.ticketing-sncf.vsct.fr
myuds.sncf.fr
*.staging.aks.eul.sncf.fr
ouranos-int.sncf.fr
laboutiqueeco.sncf.fr
oui.sncf
webstats.sncf.fr
cert00089-azurecdn.akamaized.net
e-logement.sncf.fr
rec-beb.basic-ng.exp.reseau.sncf.fr
*.sncfconnect.com
formation-dsdm.reseau.sncf.fr
banque-des-preuves-rse.sncf.fr
sources.fd.sncf.fr

Certificate

The complete raw certificate details for preprod-apies-np.sncf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuqZm3zLEqS9ASRcyRGg
nhyDR1thTHhH+m8zVYUBRRsvMeFVdi7ixn3fE1io+zvOQ69aIzClUFCocrFhfeQS
02N2kyojyayBG4H2JUWoCS7ySB0ABLNDeFSwhe8CHFVhZoHrt5MlWsxCaTrL1Ykn
kWtfXyZ75bcTtkMV4sIFADQ3MhDYWLZ4sgey5qGO6qNbfrAlBM+JWexgrlp2Yk9L
iDzpLV5r9p+oRXKFnwy9uqAsuczSYNYXe1TGinMvvVo/EMMU+2UjomG3KnsiJZZE
EafFVCOrtEfZLCj1xOQOo7FDcKaIo2PdxLZ2Yr2uK1/sVd6JTgkGmax0DWYKZVvs
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 555554901614032356350873039601991222502307388744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 09:42:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 09:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seine-Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SAINT DENIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SNCF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'preprod-apies-np.sncf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25110869969141995916421948530938547833041231899958695968699488291078165425411463474329523740898779585996623610785257811384293159631882278149347439603160082358013984356743081721043087972531596324590497802123895690973898966786100410915226850756869381039277326984808091721832548676149050621570391783523238293866749294590169712102373449382807200702125294446100947207336238939047187500696333396864779131217794976244204614060522863328741158721555030960110415684843785493523383558778219424005566502647118373957845296713442103964892511461768700117702562147813409176858769184688895552305246544320129092452083483664613556087861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-apies-np.sncf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ca0209b75717acd01d214dc66e3fe73d31a8b86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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