banque-des-preuves-rse.sncf.fr

- SNCF -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 27:b8:94:7a:43:c1:7d:87:ae:64:f5:8e:c2:d2:05:32:08:70:2d:a7 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SNCF

Organization: SNCF
Organization unit: 2808332670
State / Province: Seine-Saint-Denis
Locality: SAINT DENIS
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 27:b8:94:7a:43:c1:7d:87:ae:64:f5:8e:c2:d2:05:32:08:70:2d:a7
Serial Number (int): 226766911401488976036392851270606803774024461735
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 98:30:d8:a7:5a:03:7d:bb:4b:aa:01:90:65:23:0d:f0:8d:4e:e3:7e
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): dd:45:97:79:a6:2a:d5:d6:b5:d0:54:29:6f:83:d8:06:e2:e0:f5:20
Fingerprint (sha256): 1b:22:22:40:46:e8:4e:8f:32:77:14:68:ec:8d:d2:a1:e5:b2:99:ea:79:8d:36:a2:1e:56:5b:9d:e8:f9:88:a4

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate banque-des-preuves-rse.sncf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banque-des-preuves-rse.sncf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banque-des-preuves-rse.sncf.fr

Other certificates including the domain name sncf.fr

(limited to 100 certificates)
pre-atlas-travaux.sso.reseau.sncf.fr
*.carmen.sncf.fr
octave-api-dev.sncf.fr
www.EME-portailSSO-sncf.com
*.apps.eul.sncf.fr
vdixenpilote.sncf.fr
cert00089-azurecdn.akamaized.net
formtractiontv.sncf.fr
*.sncfconnect.com
rhobs-archives-dev.sncf.fr
smartoffice.sncf.fr
seminaire-rh-2017.sncf.fr
seminaire-rh-2017.sncf.fr
postprod-pcs-reponse.reseau.sncf.fr
test-slan.sncf.fr
resultats-labo-paris.sncf.fr
cypres-api-int.sncf.fr
matomo.fd.sncf.fr
sncf.com
pmad.reseau.sncf.com
int.auth.sso.reseau.sncf.fr
sncf.com
mattv.sncf.fr
sts.commun.ad.sncf.fr
alerte-transilien.sncf.fr
dev-prospectus.sncf.fr
orion-connect-form.sncf.fr
accessibilite.sncf.com
sources.fd.sncf.fr
monacademie.sncf.fr
pdvf-rec.sncf.fr
cert00089-azurecdn.akamaized.net
robustest-cerbere.dgexsol.sncf.fr
postprod-fit.reseau.sncf.fr
s2if-gie.sncf.com
cert00089-azurecdn.akamaized.net
preprod-pcs-reponse.reseau.sncf.fr
mestrainsdhier.fd.sncf.fr
monacademie.sncf.fr
*.fret.sncf.com
localiter.sncf.fr
bonneannee.sncf.fr
test-slan.sncf.fr
catalogue-formation-fret.sncf.fr
resultats-labo-lyon.sncf.fr
preprod-apies-np.sncf.fr
netkin.eu
laboutiqueeco.sncf.fr
quizrh.sncf.fr
cashsolutions.sncf.fr
enquete-client.dgii.sncf.fr
form-papact.prevention.sncf.fr
*.ase-01-e2-pr.cloud.sncf.fr
poc.portail-citrix.reseau.sncf.fr
moter-recette.sncf.fr
netkin.eu
recette1.ticketing-sncf.vsct.fr
mon-assistant-visuel-int.sncf.fr
veillesst.prevention.sncf.fr
sncfcontact.sncf.fr
form.prevention.sncf.fr
www.srtpf.fr
siph.sso.reseau.sncf.fr
viveletrain-forumemploi.sncf.fr
www.tech.sncf.fr
declic-for.infra.sncf.fr
*.api-np.sncf.fr
*.accessly.divadigital.sncf.fr
int-auth.sso.reseau.sncf.fr
contact-contravention-integration.sncf.fr
recette1.ticketing-sncf.vsct.fr
diva.sncf.fr
dev-apies-np.sncf.fr
matomo.fd.sncf.fr
*.dashboardly.divadigital.sncf.fr
preprod-apies-np.sncf.fr
netkin.eu
hospitalite-france2019.sncf.fr
themis-regles-dev.sncf.fr
design-bootstrap.sncf.fr
mestrainsdhier.fd.sncf.fr
netkin.eu
g11-ref-optimum.sncf.fr
snr.infra.eva.sncf.fr
preprod-stockfds-webapi.prevention.sncf.fr
dev-salto-iamapp.sncf.fr
recette1.ticketing-sncf.vsct.fr
myuds.sncf.fr
*.staging.aks.eul.sncf.fr
ouranos-int.sncf.fr
laboutiqueeco.sncf.fr
oui.sncf
webstats.sncf.fr
cert00089-azurecdn.akamaized.net
e-logement.sncf.fr
rec-beb.basic-ng.exp.reseau.sncf.fr
*.sncfconnect.com
formation-dsdm.reseau.sncf.fr
banque-des-preuves-rse.sncf.fr
sources.fd.sncf.fr

Certificate

The complete raw certificate details for banque-des-preuves-rse.sncf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kylgFBIhrKsNQhk0zPU
o+8r6niZShhidaIio5ygrSEXd5+7SPcywRCK/2GYE4DQAf58NFSFJF1X+E8aiDZ4
V8ODtRA/TRywEEaeO3ILMq/g9GgaWnncdsJq8opQBlWGrJJHRigbGES2EPsEZPNz
2mYUl/A1HSzoT8XwJnxryAyhppstK3JI4npw3QgL0Y0DIYGugXls4UkedC6qR6+5
O2SHD0YvAOGTXQYVSdoXnGX2QCQbCexWclSfSVHxcpBZE3FDH6oqmWFadUK4FYL0
/akRAVBvp3IGWmnGC6i0aMklEqUSLnpgg92ZO49Lu0D+PAj4V1Jq28IQEdF0LHn9
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226766911401488976036392851270606803774024461735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 15:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 15:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seine-Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SAINT DENIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SNCF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '2808332670'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'banque-des-preuves-rse.sncf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29577559154531117386756873228431284229483035329285521997691854731162568603584900746630531853318959053031142790992031678852494936992377544010626278514226220697606407354864555044895083664301140934447456007174490779530823612646249003183455956998106972495859850097175097404159122932656129082816257206168623154492988856916758804837156478118300529886844677429698697723459553309265887121154998866896068982017182738877740607584064374577123266059096015661357120319249888839063945358787562659626189062757176795660723072086112080901946277400803873256942915301277846929918829386650466787556986009938035261289591988197564719168769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banque-des-preuves-rse.sncf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9830d8a75a037dbb4baa019065230df08d4ee37e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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