www.edf.com

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:d0:a2:ef:81:d3:4d:ce:3f:e7:94:e1:7f:d4:ab:2f:c6 was issued on by KEYNECTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:d0:a2:ef:81:d3:4d:ce:3f:e7:94:e1:7f:d4:ab:2f:c6
Serial Number (int): 1492415504381311231065973539964403936079814
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 49:dd:44:1c:6a:9f:45:8f:b4:5a:60:ad:7a:f6:09:b3:1e:80:df:7c
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 5b:39:b5:0d:fb:aa:31:b1:3b:b4:61:5c:4c:07:fa:b7:2d:e6:87:7a
Fingerprint (sha256): 18:74:fa:b3:4b:78:97:e0:5e:52:81:fe:30:80:8b:e9:7c:15:07:7d:0f:53:89:e4:55:7a:01:08:b7:8f:4c:cb


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate www.edf.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.edf.com
edf.com

Other certificates including the domain name edf.com

(limited to 100 certificates)
entreprises.edf.com
pwa-sso-rbb.edf.fr
sso.edf.fr
pcyintplypdi001.neoprod.edf.fr
autodiscover.intranet.edf.com
entreprises.edf.com
edfenergy-pulse.edf.com
sei-raccordement.edf.fr
one-module.edf.fr
m-visibiliteconso.edf.com
api-particuliers-pp.edf.com
pcydmzplywfe001.intranet.edf.com
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
projetsfondation.edf.com
collab.intranet.enedis.fr
sso-perf.edf.fr
m-particuliers-preprod.edf.com
openx.edf.com
pass-collectivites-preproduction.edf.com
edf.fr
particuliers.edf.com
noeintplypfe002.neoprod.edf.fr
pass-collectivites.edf.com
netkin.eu
pc2fy72t.pcy.edf.fr
publish-pp2-siterc.cie.edf.fr
noedmzplywdi001.intranet.edf.com
partenaires-internet-iq.edf.com
edf.fr
archives.edf.com
sso-rbb.edf.fr
www.edf.com
noeplyaccess01.edf.fr
trophees.edf.com
sei-ael-corse.edf.com
edfpro.edf.com
edf.com
one.edf.fr
edf.fr
sso-iq.edf.fr
fondation.edf.com
noedmzplywdi001.intranet.edf.com
sso-iq.edf.fr
edf.fr
www.clubactionnaires.edf.com
edf.fr
brandcenter-en.edf.com
NOEINTPLYPFE002.neoprod.edf.fr
sso-r7f.edf.fr
ghood.edf.com
about-us.edf.com
ws-affaires-pp.edf.com
pha.edf.com
fondation.edf.com
noedmzplywdi001.intranet.edf.com
pulse.edf.com
sso-r7b.edf.fr
pcyplyaccess01.edf.fr
www.edf.com
PCYINTPLYPFE001.neoprod.edf.fr
rce-partenaires-recette.edf.com
webmail.intranet.edf.com
trophees.edf.com
pcyintplypfe001.neoprod.edf.fr
photocenter.edf.com
pass-collectivites.edf.com
www.edf.com
partenaires.edf.com
edf.com
partenaires-edfetmoi-recette.edf.com
sei-pee-corse.edf.com
noedmzplywfe001.intranet.edf.com
pw1-ssor7a.edf.fr
pcydmzplywdi001.intranet.edf.com
pcyintplypfe002.neoprod.edf.fr
objective2degrees.edf.com
webmail.intranet.edf.com
sso-interne-r7b.edf.fr
api-particuliers-pp.edf.com
m-r7.entreprises.edf.com
netkin.eu
projetsfondation.edf.com
pcyintplypfe001.neoprod.edf.fr
temoignages.fondation.edf.com
m-particuliers.edf.com
noeintplypfe001.neoprod.edf.fr
bundle-20170208-01.sslpw.fr
noeplyaccess01.edf.fr
m.entreprises.edf.com
ssospex.intranet.edf.com
noeintplypfe002.neoprod.edf.fr
collab.intranet.enedis.fr
temoignages.fondation.edf.com
sso-interne-iq.edf.fr
ssospex.intranet.edf.com
temoignages.fondation.edf.com
etreactionnaire.edf.com
netkin.eu
pcyplyaccess01.edf.fr

Certificate

The complete raw certificate details for www.edf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20ggY64gu7caNrtzdWv5
KVdcY/TVQP4kYZBQlOBCrZa7dzNFAFMUqEExZMUUCdEvjBUd9ES7L+RImtxQdBep
k+nYEeKc8JgaZGYrOL0Pxu6WutzvpV0uFm/OBpUXXs/us8FgmkKLuQSg/TRftWuI
2lasJbGqImJXx+1pbvjdVbCx/+n8VMVXyTlr8+A6Cj/UFvfrHjADEPYjwJKpG29J
x/ueMuu9ETezz4Vn+oqyqAYUaycpahO1i+5x2z/LBggedxTgI4Vh403kSJPeJHPF
y5DGlhU/08hbq6TF6cHAc2E30KF/m/nHpKgZDuntTnTe/bYuFVrAndgr8CYAcRkh
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492415504381311231065973539964403936079814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-06 12:49:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 12:49:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27681755700668423678386695711395012817637856640329217331716768744056071093823747122826481785773730332185054594587920090169526837041117784283723350356270010193771402391255031652446562174971331807182151910940627362804926788785451050945114211188984194363843857967393252329405040593623613096626208280216628785861986907124466316115042235932495877525758319675553864119544629131117959790232215281580142499672568334577857322863174444659390623626777195015133365668725810751748552924462469182875285966470379561663290012631090910971839209558825591864267789654483155683595069926307931403825366756843747203834245317565353194758503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49dd441c6a9f458fb45a60ad7af609b31e80df7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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