*.eloquant.com

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number b8:65:c7:63:02:f3:ef:ee:af:55:a0:8c:27:4f:d7:2f was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.eloquant.com

Gandi

Organization: Gandi
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): b8:65:c7:63:02:f3:ef:ee:af:55:a0:8c:27:4f:d7:2f
Serial Number (int): 245106417251149625841723587753147356975
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:0d:09:e9:29:3d:8c:32:00:af:18:34:b4:21:b2:ca:17:ac:2a:4a
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): 0e:fd:c7:f6:96:03:ed:0e:99:ae:cd:7c:b2:5a:d6:a9:22:c6:4a:1f
Fingerprint (sha256): 1b:2a:a6:ce:2f:8a:ea:85:94:43:b0:fc:e2:cd:e9:bf:18:78:d9:13:a9:09:45:4a:2a:50:2a:2d:f3:75:2a:20

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.eloquant.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eloquant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eloquant.com
eloquant.com

Other certificates including the domain name eloquant.com

(limited to 100 certificates)
gatheringtoolstest.gtec.pro
*.eloquant.com
*.gieres.eloquant.com
portal.guest.eloquant.com
lemasdelentrecollines.com
*.eloquant.com
*.gieres.eloquant.com
forum-clients.eloquant.com
hotel-optimiser.gtec.pro
www.cabinet-gtec.fr
portal.guest.eloquant.com
portal.guest.eloquant.com
portal.guest.eloquant.com
beta.it-shaker.com
rodacom.gtec.pro
blog.wereport.io
*.gieres.eloquant.com
blog.damaaas.com
wiki.gieres.eloquant.com
tmm-software.gtec.pro
www.la-relation-client.com
portal.guest.eloquant.com
wiki.gieres.eloquant.com
www.masdelentrecollines.com
*.gieres.eloquant.com
www.runrunmonkey.fr
www.editeur-logiciel.com
oxio.fr
*.eloquant.com
pressnsoft.gtec.pro
eloquant.com
inspearit.gtec.pro
open-prod.gtec.pro
*.eloquant.com
eloquant.com
eloquant.com
www.cabinet-gtec.fr
*.eloquant.com
www.la-relation-client.com
*.gieres.eloquant.com
www.pressnsoft.fr
portal.guest.eloquant.com
*.eloquant.com
*.gieres.eloquant.com
mautictest.gtec.pro

Certificate

The complete raw certificate details for *.eloquant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolIm3JH0PaEGKrDyVtf3
72FpMWp830aX7hdWyHI/Y2AMK6w/xWlNzPEkssAI93SYjJX924EdMePyZcee9+dn
nqPsOBX+qEre06WvcXPBlAdZHd+62F5rHmIyep3tFGV7Q9rGaYnmy1cnGSThLhpW
CwEOWfxSAiaunYX1EzQgez9Zix3iHwEWurlv/kb+vrc51cBWpsC162faWQDa4pKs
tm7L1I7SNCfU6FKEiB1vZ52nQQ/dSDtmve+msE2WxyP+5JN7JYPFAr1gWGap8zyx
svU7RrAxBVT1Bgcr07PRJ+NHsys2Bv8ygGf+eVMqyNmo/L2T/3vF9JZ05oc1I3o/
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245106417251149625841723587753147356975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eloquant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20491115968475841246630957549345300898868889633968035663017570393965793635989187574790022495781699074282661178565831693787478513543578970847507749898633159122664469853187390136090269320052878664840650696516885128924027597575582819419435192279992638414628503001933757598813875155019047490374316663441425852194959135335272627310808016721300857241542477262467906080272000597657781152402646635278465803270150162620215163317389081564274836678098560512565129219791919120733887498265822832563872802791776271366054975604651941061681687660877635770353547091572439403227386450979037088480294907195769866288744741257135267659739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							810d09e9293d8c3200af1834b421b2ca17ac2a4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eloquant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eloquant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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