tse.gesika.fr

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number b5:97:cb:55:5e:aa:e7:48:04:e6:32:5b:9a:73:c9:5b was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tse.gesika.fr

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): b5:97:cb:55:5e:aa:e7:48:04:e6:32:5b:9a:73:c9:5b
Serial Number (int): 241378428155550087476779004204472846683
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7b:52:43:cf:82:0a:bf:d7:09:8c:54:3e:86:3a:1f:cd:1a:f1:f6:87
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): c1:a9:00:c8:07:f6:cd:2b:ca:c8:54:86:75:9c:2b:ff:08:a6:e5:12
Fingerprint (sha256): 19:6c:03:34:7d:6d:24:e8:bd:3e:5a:86:00:c9:4f:6d:fb:67:db:00:d4:f1:61:29:13:b9:1e:38:37:d1:29:eb

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate tse.gesika.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tse.gesika.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tse.gesika.fr
www.tse.gesika.fr

Other certificates including the domain name gesika.fr

(limited to 100 certificates)
desk.netvia.global
supporto.consulenteimmobiliare.info
zoho.oncode.it
support.resotoor.com
support.advancecu.org.uk
mygesika.com
med.gesika.fr
zoho.oncode.it
tse.gesika.fr
zoho.oncode.it
zoho.oncode.it
zoho.oncode.it
support.desk.gesika.fr
zoho.oncode.it
desk.netvia.global
support.kuschly.com
eduhelp.bau-master.com
zoho.oncode.it
zoho.oncode.it
desk.netvia.global
helpdesk.wetix.co
tse.gesika.fr
mygesika.com
zoho.oncode.it
support.marasit.com
helpdesk.presmont.it
mygesika.com
zoho.oncode.it
med.gesika.fr
gesika.fr
gesika.fr
zoho.oncode.it
eduhelp.bau-master.com
support.ligerio.fr
support.ligerio.fr
support.advancecu.org.uk
support.desk.gesika.fr
mygesika.com
zoho.oncode.it
gesika.fr
zoho.oncode.it
support.desk.gesika.fr
support.desk.gesika.fr
med.gesika.fr
helpdesk.wetix.co
support.advancecu.org.uk
support.marasit.com
zoho.oncode.it
portal.arcsus.engineering
gesika.fr
eduhelp.bau-master.com
gesika.fr
zoho.oncode.it
zoho.oncode.it
zoho.oncode.it
zoho.oncode.it
gesika.fr
support.advancecu.org.uk
zoho.oncode.it
zoho.oncode.it
supporto.consulenteimmobiliare.info
eduhelp.bau-master.com
desk.amplifysales.co.uk
med.gesika.fr
support.marasit.com
helpdesk.wetix.co
help.memorycherish.com
zoho.oncode.it
zoho.oncode.it
supporto.consulenteimmobiliare.info
support.advancecu.org.uk
zoho.oncode.it
support.kuschly.com
zoho.oncode.it
zoho.oncode.it
support.resotoor.com
support.resotoor.com
gedimai.securitysolution.lt
helpdesk.wetix.co
zoho.oncode.it
zoho.oncode.it
desk.netvia.global
support.kuschly.com
help.memorycherish.com
zoho.oncode.it
zoho.oncode.it
zoho.oncode.it
support.ligerio.fr
www.help.etal.ro
gesika.fr
support.resotoor.com
zoho.oncode.it
portal.arcsus.engineering
gedimai.securitysolution.lt
zoho.oncode.it
www.help.etal.ro
zoho.oncode.it
support.marasit.com
supporto.consulenteimmobiliare.info
med.gesika.fr

Certificate

The complete raw certificate details for tse.gesika.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJcJ48iyOP1ADF5uBWmd
rColkspisWJC1huOsnp19MioTmn0lW7HS2HaygyBovnpJWW31SQ/O11ZvEvb+CsT
D33c8iTBItjthhzRYV4WmisVd46/zpzKSfcwCzvCTO5Fo9AUGoQGeIxmoKRYFeOF
7gpjZKINkPKxyI/U017EC2TaDHkIsp5d1lnuEZHalwJ05wBoUC0cf6Kt1B3jZh3o
SRUpJAicpYYR4YZ+15bFX7RQcXjQM+NGz60zGQSV5BkyVZMf0Fr1TYN6j+h/3LKu
wNQNwybYmvntwMImiLs3xrp7EVLJcEGgYU4nSgnkkDEFuXMrxHCVUaM1/TDMVAwH
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 241378428155550087476779004204472846683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tse.gesika.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23807281258942116506567396805242632406991255991677525386346495318934876378062457152171193318950353809412463508662017110686648894210161687699548419217110150385798840269399970823976370874258975017872359425487351046898489138006152709496675883593849496798856007966686739811766507789484133411437765222632793523595651590247307403533053870676800125857343990713665273963517033666276654096165242336614320709013428255245653678581122696140028121359503745873760812365388090654201097927689604093831330932573872783975362786445617268837010806709022126829895341088174109480592179580264970231767738352880648336215521968877913101830001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b5243cf820abfd7098c543e863a1fcd1af1f687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tse.gesika.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tse.gesika.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000170d86d1bbb0000040300483046022100a225eb813193e9d36853e48a13b20f1b65a9a58f09b55866b8b98b0da42c4c2f022100e66d0e1ce3edb5c511aaf01e2f9f10dd520d1ab577dc1fca7f767919437942f70076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000170d86d1b86000004030047304502204caaed317c4a322ebea25bd06d6bb223d946fddcb7141d963e79128be0db65490221009bdad43fcafed7c76a92053f183a8403ca4c9c84c402a59aae6161aeb9008e83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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