winter.dacia.ch

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 54:e3:c9:eb:df:ee:a7:1d:33:f7:30:bf:f7:70:4d:d4 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winter.dacia.ch,C=FR,1.2.840.113549.1.9.1=#0c1061646d696e406d616b6f6c61622e706c

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 54:e3:c9:eb:df:ee:a7:1d:33:f7:30:bf:f7:70:4d:d4
Serial Number (int): 112837898485072534742601728264382729684
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7d:d6:ba:1b:63:7d:43:8c:33:ba:ad:d5:c4:4a:7b:fc:14:eb:48:e4
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): 38:ea:5b:ff:4d:f3:07:e0:ce:10:03:e2:7e:7f:69:de:81:94:f1:06
Fingerprint (sha256): 16:ec:84:5c:20:15:ee:b0:02:7a:17:61:24:e2:53:a3:43:90:c4:7d:53:7e:98:03:d4:68:61:34:14:de:e5:d2

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate winter.dacia.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winter.dacia.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winter.dacia.ch
www.winter.dacia.ch

Other certificates including the domain name dacia.ch

(limited to 100 certificates)
media.renault.ch
webforms.dacia.ch
odc-ctrl.alpinecars.at
accessoires.renault.fr
winter.dacia.ch
*.wrd-aws.com
accessoires.renault.fr
media.renault.ch
*.wrd-aws.com
*.wrd-aws.com
www.dacia.be
gdl.renault.fr
www.leasing.dacia.ch
gdl-ctrl.renault.fr
*.wrd-aws.com
gigya-prod-eu1.renew.auto
gdl-ctrl.renault.fr
wintercheck.dacia.ch
media.renault.ch
wintercheck.dacia.ch
gdl.renault.fr
staging.dacia.be
conf.dacia.ch
*.wrd-aws.com
odc-ctrl.alpinecars.at
conf.dacia.ch
staging.dacia.be
mysandero.dacia.be
odc.renault.fr
*.wrd-aws.com
www.renault.fr
webforms.dacia.ch
gdl.renault.fr
gdl.renault.fr
*.wrd-aws.com
media.renault.ch
gdl-ctrl.renault.fr
winter.dacia.ch
lcl.renault.fr
forms.dacia.ch
www.dacia.be
conf.dacia.ch
*.wrd-aws.com
m.dacia.ch
webforms.dacia.ch
gdl.renault.fr
*.wrd-aws.com
accessoires.renault.fr
staging.dacia.be
www.leasing.dacia.ch
dacia-tage.ch
*.wrd-aws.com
opo.dacia.ch
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
*.wrd-aws.com
opo.dacia.ch
*.wrd-aws.com
www.renault.fr
lcl.renault.fr
media.renault.ch
conf.dacia.ch
www.renault.fr
lcl.renault.fr
news.dacia.ch
daciashop.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
lcl-ctrl.renault.fr
winter.dacia.ch
odc-ctrl.alpinecars.at
media.renault.ch
*.wrd-aws.com
www.renault.fr
accessoires.renault.fr
odc.renault.fr
media.renault.ch
odc.renault.fr
conf.dacia.ch
webforms.dacia.ch
www.leasing.dacia.ch
gigya-prod-eu1.renew.auto
media.renault.ch
webforms.dacia.ch
*.wrd-aws.com
*.wrd-aws.com
odc.renault.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
news.dacia.ch
*.wrd-aws.com

Certificate

The complete raw certificate details for winter.dacia.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHJUUkVEZlrkdijWAs0w
ISo98bCw8ZFdzsOHU8PfDjTdIe9SSfqUPx2RoctmJvFZVWSBVJV24TjTwTWJZw/j
L6HL9xYdm7NQ1hzexPj9ffyUVGnvQQR/CIRpAGCIPO1j2vVWB2NuoxXJF4PJ8Xs6
fblM/6hv1OM5MLvgP+kCgOsQpvNRrMKIeILyf4ilXDeyZxunQv8mIc9FKZrCKoOC
dBpv+dCeq/mXtYsl/7L1xkj6RarVDGNjXCgF1MhgfTWg9/ve1OkKUncMW44O2l00
5a8wj9YK2w4hXHaq8bh+kfXEVbmZIV7Uzx9zBUVQeUCC3zg+VLpJYYb9e6hfgv8+
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112837898485072534742601728264382729684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-28 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'winter.dacia.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24294132472167324432058127025932990462758584774894064322130319376687516384244203436812161564261802086067691533360389701686921724218735375608492848314564324800961051317470079456941076605211509542155210012370410730925895985366232173842884014287003196110998594336493607605051402552190142030795383295237805674573368474142935175371472063620802110184353316998784241211324607516625386065200497035815724678186216904744601975527368594120245986455440312367908651094320831082223845193727329114793173341177572982814337260862137284753599744715054389834431190304319271705230797058610636818889521452317117184647306741885716016348783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dd6ba1b637d438c33baadd5c44a7bfc14eb48e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.dacia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winter.dacia.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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