fournisseursderdf-pp.erdf.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:27:bf:18:c2:d7:34:cd:eb:f0:85:e5:f2:23:82:fe:98:59 was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:27:bf:18:c2:d7:34:cd:eb:f0:85:e5:f2:23:82:fe:98:59
Serial Number (int): 1494433884263998177048753229320320830052441
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: b3:c3:95:55:8a:1e:a1:79:f4:16:70:71:9c:89:f2:f4:a3:85:64:61
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): bb:e9:66:83:c2:43:41:0c:0b:70:3b:a5:21:e0:ea:a7:cd:41:fa:87
Fingerprint (sha256): 16:c5:ae:22:45:fe:13:df:fa:38:3b:ba:3c:d2:f9:f7:1e:13:00:8e:28:cc:8a:bc:7a:d8:ec:12:4d:a2:3f:91


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate fournisseursderdf-pp.erdf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fournisseursderdf-pp.erdf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fournisseursderdf-pp.erdf.fr

Other certificates including the domain name erdf.fr

(limited to 100 certificates)
s02.noe.ldap.qualif.alpha.swb.enedis.fr
espace-client-collectivites.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
sge-homologation2-b2b.erdf.fr
espace-client-connexion-pprod.erdf.fr
preiq-websso-gardian.edf.fr
zpl03748.zse.erdf.fr
api-lincs-qualif.enedis.fr
espace-client-entreprises-pprod.enedis.fr
noedmzplywdi001.intranet.edf.com
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
data.erdf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
ecampus.erdf.fr
sge.erdf.fr
fournisseursdenedis.enedis.fr
smartgrid-solenn.enedis.fr
bilan-electrique.erdf.fr
zpl03752.zse.erdf.fr
myaccess.myelectricnetwork.com
espace-client-connexion-perf.erdf.fr
api-lincs-perf.enedis.fr
pha.edf.com
data.erdf.fr
zpl03747.zse.erdf.fr
emm.erdf.fr
vpnzsa.edf.fr
fournisseursderdf-pp.erdf.fr
simm.sge-homologation.erdf.fr
zeq331ba.distribution.edf.fr
panorama.erdf.fr
enedis.fr
espace-client-pprod.enedis.fr
nomade.edf.fr
data.erdf.fr
websso-gardian.edf.fr
www.curde.enedis.fr
websso-gardian.edf.fr
espace-client-collectivites-perf.enedis.fr
espace-client-entreprises-perf.enedis.fr
collab.intranet.enedis.fr
ecampus.erdf.fr
espace-client-collectivites-pprod.enedis.fr
espace-client-entreprises.enedis.fr
vpnzsa.edf.fr
espace-client-rec-dmz.enedis.fr
ecampus.erdf.fr
preiq-websso-gardian.edf.fr
preiq-proxywebsso-gardian.edf.fr
enedis.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
api-lincs-rec-dmz.erdf.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
webmail.intranet.enedis.fr
websso-gardian.edf.fr
noedmzplywfe001.intranet.edf.com
espace-client-connexion-rec-dmz.erdf.fr
enedis.fr
espace-client-connexion-pprod.erdf.fr
odigo-pic.erdf.fr
data.erdf.fr
espace-client-collectivites-rec-zhb.enedis.fr
sge.erdf.fr
espace-client-pprod.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
websso-gardian.edf.fr
pha.edf.com
ecampus.erdf.fr
bilan-electrique.erdf.fr
zer331b8.distribution.edf.fr
espace-client-connexion-rec-dmz.erdf.fr
simm.sge-homologation.erdf.fr
laruche.erdf.fr
s01.pcy.ldap.qualif.alpha.swb.enedis.fr
espace-client-connexion-rec-dmz.erdf.fr
camae.enedis.fr
espace-client-entreprises.enedis.fr
herakles-iq.erdfdistribution.fr
collab.intranet.edf.com
preiq-proxywebsso-gardian.edf.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
datalake.erdf.fr
zer331ba.distribution.edf.fr
lincs-staging-pprod.enedis.fr
data.erdf.fr
webmail.intranet.edf.com
espace-client-rec-dmz.erdf.fr
espace-client-particuliers.enedis.fr
espace-client-entreprises.erdf.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
vpnzsa2.edf.fr
nomade2020.edf.fr
zed331b4.distribution.edf.fr
panorama.erdf.fr
zer331b8.distribution.edf.fr

Certificate

The complete raw certificate details for fournisseursderdf-pp.erdf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCqScUfdgNCu4FP1RuE6
pSp0+tffRt5TtjiU/qlud81UMGnSD4xnjQX+UwiKyn+jZpVWuaSAtdr5JYLsGhMM
AE8A432m4uQqz8CALU0ABbUF5JxUjWYnmMSJK4SqpiBmQn9XBSp419EXmbVp3gkO
/1tBQtwzfAlt2+Z471rAhv37oyQjNMLWrRpwuie0KH3t1nhGf3I+zyvRPbpTkz6V
fTmhHtjlsBRu5JWsoCnFxcVCtHLcjWnpYtZRAgf2kQ23o+VREP0sQHaNmrd3gWZf
HRMm3GE2UG5f39UMJOtFg6FIjPpoyo7tc+UKk8Mo9jjX1V9SWCC+MkBkPJQvJR+p
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494433884263998177048753229320320830052441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-04 13:14:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-04 13:14:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fournisseursderdf-pp.erdf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22743887949742707844004542353693440569542113235106569755416825128679681832227714015785741673342938700561045991337146768019639499628468786910559198277404405072276194957911878595699576383762583495887019552022765283752343477756456679160344353085723485991953342691537759389478844135010164379969027206036260997140782028185009473581449219559985102716779984968571350455054656959765889380444326225810121142021254056300473490220387893386533764960426016617449060485211814285783068778975807734776148101457727646193019575825535624214272356131177033567313912071094139322942492086329146238064126369476944939807996745820079059347873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fournisseursderdf-pp.erdf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3c395558a1ea179f41670719c89f2f4a3856461
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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