sei-pee-corse.edf.com

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:0f:db:aa:a2:83:f5:94:71:1d:ed:e0:41:6b:30:22:b1 was issued on by KEYNECTIS.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:0f:db:aa:a2:83:f5:94:71:1d:ed:e0:41:6b:30:22:b1
Serial Number (int): 1492159257942149389524445933593646326620849
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 5c:1f:f9:bc:ba:b4:88:f3:1a:f2:76:3b:1b:3c:95:27:bd:76:6c:02
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): d5:78:bd:9f:fc:35:32:40:ce:f3:3d:77:1e:f6:42:1a:7a:95:e6:2d
Fingerprint (sha256): 19:86:5a:af:5c:fe:de:b3:ec:d9:8a:bc:1e:5f:db:a0:2c:f7:92:3f:8d:17:ee:74:01:d4:6a:e5:54:63:b6:db


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate sei-pee-corse.edf.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sei-pee-corse.edf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sei-pee-corse.edf.com
sei-pee-guadeloupe.edf.com
sei-pee-guyane.edf.com
sei-pee-martinique.edf.com
sei-pee-reunion.edf.com

Other certificates including the domain name edf.com

(limited to 100 certificates)
entreprises.edf.com
pwa-sso-rbb.edf.fr
sso.edf.fr
pcyintplypdi001.neoprod.edf.fr
autodiscover.intranet.edf.com
entreprises.edf.com
edfenergy-pulse.edf.com
sei-raccordement.edf.fr
one-module.edf.fr
m-visibiliteconso.edf.com
api-particuliers-pp.edf.com
pcydmzplywfe001.intranet.edf.com
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
projetsfondation.edf.com
collab.intranet.enedis.fr
sso-perf.edf.fr
m-particuliers-preprod.edf.com
openx.edf.com
pass-collectivites-preproduction.edf.com
edf.fr
particuliers.edf.com
noeintplypfe002.neoprod.edf.fr
pass-collectivites.edf.com
netkin.eu
pc2fy72t.pcy.edf.fr
publish-pp2-siterc.cie.edf.fr
noedmzplywdi001.intranet.edf.com
partenaires-internet-iq.edf.com
edf.fr
archives.edf.com
sso-rbb.edf.fr
www.edf.com
noeplyaccess01.edf.fr
trophees.edf.com
sei-ael-corse.edf.com
edfpro.edf.com
edf.com
one.edf.fr
edf.fr
sso-iq.edf.fr
fondation.edf.com
noedmzplywdi001.intranet.edf.com
sso-iq.edf.fr
edf.fr
www.clubactionnaires.edf.com
edf.fr
brandcenter-en.edf.com
NOEINTPLYPFE002.neoprod.edf.fr
sso-r7f.edf.fr
ghood.edf.com
about-us.edf.com
ws-affaires-pp.edf.com
pha.edf.com
fondation.edf.com
noedmzplywdi001.intranet.edf.com
pulse.edf.com
sso-r7b.edf.fr
pcyplyaccess01.edf.fr
www.edf.com
PCYINTPLYPFE001.neoprod.edf.fr
rce-partenaires-recette.edf.com
webmail.intranet.edf.com
trophees.edf.com
pcyintplypfe001.neoprod.edf.fr
photocenter.edf.com
pass-collectivites.edf.com
www.edf.com
partenaires.edf.com
edf.com
partenaires-edfetmoi-recette.edf.com
sei-pee-corse.edf.com
noedmzplywfe001.intranet.edf.com
pw1-ssor7a.edf.fr
pcydmzplywdi001.intranet.edf.com
pcyintplypfe002.neoprod.edf.fr
objective2degrees.edf.com
webmail.intranet.edf.com
sso-interne-r7b.edf.fr
api-particuliers-pp.edf.com
m-r7.entreprises.edf.com
netkin.eu
projetsfondation.edf.com
pcyintplypfe001.neoprod.edf.fr
temoignages.fondation.edf.com
m-particuliers.edf.com
noeintplypfe001.neoprod.edf.fr
bundle-20170208-01.sslpw.fr
noeplyaccess01.edf.fr
m.entreprises.edf.com
ssospex.intranet.edf.com
noeintplypfe002.neoprod.edf.fr
collab.intranet.enedis.fr
temoignages.fondation.edf.com
sso-interne-iq.edf.fr
ssospex.intranet.edf.com
temoignages.fondation.edf.com
etreactionnaire.edf.com
netkin.eu
pcyplyaccess01.edf.fr

Certificate

The complete raw certificate details for sei-pee-corse.edf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvj4cy1sY1fnTUaRmFig
imyqtSe+atKnP1ZEuwxN40FvAIbXXotWjEvypyu/B3Ee5mkOSNL/gsPhRusuVj2h
8CDBYdJ7/KgW9/4a8XYBot0JEi3nITIfmQ4OIT+3/6/iLY5tt3iIbnCaNrRFNBJe
rqXYFFy8dPy2QgaJwOMokmOITcmL23CZWneEragORrLF5a3QTaSkw3pwRAd8aJ86
R3bak2y1xSOjRSw029hMGSNrBnMtVygxC9KshUFZstDsIfpl45yIseRpFOKNUdUI
0TfGbwdV2fGBnkbHhvhg4XgM7yf9VKmGbuYTovyI6o8ln0ih/bJqtkYQFqZL+xsg
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492159257942149389524445933593646326620849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-23 14:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-24 14:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sei-pee-corse.edf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24108049876556307760743491551483255534253921745613435805420519749471424316728090129084033444527594013218297816929376681491591289627404075586957393776343850231552665364704287265862809604291025582271513695645110918965389731561993295811942158643967047893274328268945351134447915862539778933048635846412896840649311389352763372453136614477090884473198357330395885319433978892537937312683885395060553643509323522114950087706014286853543021346471214672341872524274342903279840170139934468757086335413781202376411131455322077193271939518456643597585972793513078694235947546616642080805473392973311922833819436791066328244389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-pee-corse.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-pee-guadeloupe.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-pee-guyane.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-pee-martinique.edf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sei-pee-reunion.edf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c1ff9bcbab488f31af2763b1b3c9527bd766c02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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