webmail.irstea.fr

- INRAE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8d:25:33:24:03:91:e0:d3:c5:46:a7:50:00:98:5d:0f was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

INRAE

Organization: INRAE
State / Province: Ile-de-France
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 8d:25:33:24:03:91:e0:d3:c5:46:a7:50:00:98:5d:0f
Serial Number (int): 187614299645647374440278750566748282127
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:80:4b:57:56:60:ca:5a:85:bd:75:95:af:d6:e2:77:26:7b:dd:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): da:31:b5:80:52:c9:a2:6d:a9:6c:75:28:02:e4:30:15:db:64:96:4e
Fingerprint (sha256): 1a:e5:1a:23:79:b6:21:e7:0b:81:49:02:29:bd:3a:68:10:85:8d:35:b4:d1:49:63:48:ea:a0:63:d4:39:5b:5c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate webmail.irstea.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.irstea.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.irstea.fr
mail.irstea.fr
partage.inrae.fr
partage.irstea.fr

Other certificates including the domain name irstea.fr

(limited to 100 certificates)
passport.irstea.fr
vocabulaires.test.irstea.fr
gmd.irstea.fr
deepomics.test.irstea.fr
acme.irstea.fr
energie-step-diagnostic.irstea.fr
energie-step-diagnostic.irstea.fr
gitlab.irstea.fr
demdoc.irstea.fr
accesdistant.irstea.fr
sam.irstea.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
iwa-gmp-tg.irstea.fr
idp.test.irstea.fr
*.irstea.fr
irsteadoc.dev.irstea.fr
heart.irstea.fr
auth.irstea.fr
agirh.irstea.fr
piwik.irstea.fr
ldap.irstea.fr
metacatalogue-theia.cines.teledetection.fr
sturwild.irstea.fr
agirh.dev.irstea.fr
kanban.irstea.fr
resa.irstea.fr
wiki.irstea.fr
pad-public.irstea.fr
energie-step-diagnostic.test.irstea.fr
agirh.irstea.fr
is.irstea.fr
transect.irstea.fr
bdoh.irstea.fr
deas.irstea.fr
*.rosetta.irstea.fr
mdl4eo-cartes.irstea.fr
base-des-conventions.irstea.fr
demdoc.irstea.fr
deepomics-api.irstea.fr
bdoh.irstea.fr
energie-step-diagnostic.test.irstea.fr
iwa-gmp-tg.irstea.fr
svn.irstea.fr
plantedefi.irstea.fr
agirh.irstea.fr
plandefi.recette.irstea.fr
wwtmod2016.irstea.fr
svn.lyon.cemagref.fr
domfeu.irstea.fr
sondage.irstea.fr
actisurtt.cemagref.fr
heart.irstea.fr
ldap.irstea.fr
agirh.irstea.fr
isdevtools.irstea.fr
sygade.irstea.fr
hydroeco.irstea.fr
pasi.irstea.fr
deepomics-api.irstea.fr
sondage.irstea.fr
webmail.irstea.fr
is.irstea.fr
grainpact.inrae.fr
base-des-conventions.recette.irstea.fr
sygade.irstea.fr
riverhydraulics.inrae.fr
r2d2-2050.irstea.fr
mattermost.irstea.fr
www.irstea.fr
annuaire.irstea.fr
acme.irstea.fr
vulnefeux.irstea.fr
dysperse.inrae.fr
activites.irstea.fr
extraflo.irstea.fr
deepomics-api.test.irstea.fr
forge-irti.irstea.fr
piwik.irstea.fr
digues2019.inrae.fr
*.rosetta.irstea.fr
sam.irstea.fr
pmad.irstea.fr
mapliz.irstea.fr
webmail.irstea.fr
garabie.test.irstea.fr
bdc-simple.recette.irstea.fr
irsteadoc.irstea.fr
gitlab.irstea.fr
activites.irstea.fr
chimitheque.irstea.fr
idp.irstea.fr
usactcal.irstea.fr
passport-iam.test.irstea.fr
coupesrases.irstea.fr
resa.irstea.fr
sturwild.irstea.fr
vocabulaires.irstea.fr
passport-iam.recette.irstea.fr
sympa.irstea.fr

Certificate

The complete raw certificate details for webmail.irstea.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB1rzJaotUehcJfbEiCy
bRsRRD3IHVa5s+bs29nkKwOk85zoc5HRDC9/Em5LBHhip5SKju88xVG34nxJ8Kbg
o6xk74wXdbkYpmzpdH/jF3bbc8KFjdY6Q1Jqd42y6bDCA+IeJQlmuOXZXEq/Bei6
iEgL1/+HB2xk+F6Nlvj0M+DcQcKS6zh+BsqwhiQqHS8f64oFBAnJVj2dTlCXUE74
7jIQpKOujfmlz6WR9tdDYRGes0PJa0j0UKozy4hUW3Qtx5vFVngJvXYp+srf1WCU
eM2NVUR2tC+JyZnS83vQ31bBSkVJai2PBPGWSQK/dXMBmkLGBG9Oc5B4amkqtduY
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187614299645647374440278750566748282127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.irstea.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21222543314758276900835486762777895429367454691729274280572803881474002858190664283898692263287988201536906531406686558425173426012617908878571864064159673575037286496053460503374653639168172859894615006345006197325036949898532519020331726697548653063261973577124013687182479273283329969378186281364144154856972516496349223259038216743515463238612321899428232352543001400569260244662779824937130168652753066893065618337007978697435899779300190211287046441245889358569478580012536774031871974337623235778072317028785477690988952769522975133298608535459892203055600412415917722505261466250258046576689655728484231387141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74804b575660ca5a85bd7595afd6e277267bdd4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.irstea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.irstea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partage.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partage.irstea.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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