seb.fr

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 06:07:d9:ac:10:15:eb:3d:62:89:07:a1:e3:f1:fb:b6 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seb.fr

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:07:d9:ac:10:15:eb:3d:62:89:07:a1:e3:f1:fb:b6
Serial Number (int): 8016128967825442384599124333670038454
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d4:2f:e7:fc:6e:de:20:23:84:60:61:4e:10:c5:9c:1a:4e:6a:48:3b
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 47:ce:06:fe:67:f3:42:7f:5b:95:f3:d9:e7:94:26:c8:18:de:12:39
Fingerprint (sha256): 1c:7d:40:51:94:ef:52:88:9b:ae:df:76:98:7f:52:5b:d6:1e:03:0e:ed:d6:8b:07:d9:c0:e8:40:f2:54:b5:39

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate seb.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seb.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seb.fr

Other certificates including the domain name seb.fr

(limited to 100 certificates)
digital-ready.groupe-seb.com
quoi-de-neuf-aujourdhui.seb.fr
digital-ready3.groupe-seb.com
digital-ready3.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
seb.fr
PREPROD.api.groupe-seb.com
prod.api.groupe-seb.com
PREPROD.api.groupe-seb.com
digital-ready.groupe-seb.com
digital-ready3.groupe-seb.com
freeze.dcp.groupe-seb.com
perf.api.groupe-seb.com
seb.fr
seb.fr
www.espace-fournisseurs.seb.fr
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
seb.fr
quoi-de-neuf-aujourdhui.seb.fr
dcp2.groupe-seb.com
www.espace-fournisseurs.seb.fr
digital-ready3.groupe-seb.com
www.seb.fr
quoi-de-neuf-aujourdhui.seb.fr
bat.bo-new.groupe-seb.com
PREPROD.api.groupe-seb.com
offres.seb.fr
bat.api.groupe-seb.com
freeze.dcp.groupe-seb.com
www.seb.fr
digital-ready2.groupe-seb.com
jeu.seb.fr
quoi-de-neuf-aujourdhui.seb.fr
quoi-de-neuf-aujourdhui.seb.fr
freeze.dcp.groupe-seb.com
account.rcu.1.seb.com
quoi-de-neuf-aujourdhui.seb.fr
PREPROD.api.groupe-seb.com
dcp2.groupe-seb.com
quoi-de-neuf-aujourdhui.seb.fr
quoi-de-neuf-aujourdhui.seb.fr
digital-ready.groupe-seb.com
entraide.seb.fr
digital-ready3.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
dcp2.groupe-seb.com
PREPROD.api.groupe-seb.com
digital-ready3.groupe-seb.com
seb.fr
dcp2.groupe-seb.com
entraide.seb.fr
freeze.dcp.groupe-seb.com
digital-ready2.groupe-seb.com
quoi-de-neuf-aujourdhui.seb.fr
digital-ready2.groupe-seb.com
quoi-de-neuf-aujourdhui.seb.fr
PREPROD.api.groupe-seb.com
digital-ready2.groupe-seb.com
quoi-de-neuf-aujourdhui.seb.fr
preprod.bo-new.groupe-seb.com
freeze.dcp.groupe-seb.com
seb.fr
bat.bo.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
offres.seb.fr
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
perf.api.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
digital-ready3.groupe-seb.com
perf.bo-new.groupe-seb.com
digital-ready3.groupe-seb.com
digital-ready.groupe-seb.com
seb.fr
digital-ready.groupe-seb.com
dcp2.groupe-seb.com
seb.fr
PREPROD.api.groupe-seb.com
seb.fr
quoi-de-neuf-aujourdhui.seb.fr
seb.fr
digital-ready2.groupe-seb.com
PREPROD.api.groupe-seb.com
seb.fr
dcp2.groupe-seb.com
PREPROD.api.groupe-seb.com
seb.fr
dcp2.groupe-seb.com
digital-ready2.groupe-seb.com

Certificate

The complete raw certificate details for seb.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxMLVJhwC4fMlkcAgTfI
PviuJCa6J/rPc8glkIQrwt7khMiqpkt2F7vIcmt2yqDcJE7pfL5XhuSCD6D/2EoW
bLjcnsH0qrSRovMi/SHIqkaBZyEOdtPQkhjBM5eFY6ffZz3NGDUHG/77CyEmG6su
xjSYbo6DL7aP374/Cg4+IlDPOHG2IeSw51iqtMc9HDJze8ZPts5k3bKOJ37mkcYs
ouzJI+tiF5KHoeon/gluYS/bxhP4G4wt7Zazw8pUNJrLZC6Mz9Jxnu++VsdIZ29q
qRR+F4a+qlRS3e2WQ4FgozJ8NpmJWVkRbThzWYZlKjKusJTvfOa5wwJ0gHdiiuMO
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8016128967825442384599124333670038454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seb.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23615954103059173617213495854784654488453608404164444750218585226952787275959785952315562417434908763663148389457401026884352151126169275835145421156613361039479471548975603367507166895316034072488842565829784505272218101510441982947821098913103171257406364743899774024963248609723011685536694315510520813515055127718328968534772209445863896346168016864492183842567618928991042584207392737537147450682658878891923339325422235083387072039205217598132093637288135869825860604825379906190303958007453791140930204689212594028483779934577586279333926884885343864968715442415217029131048566305464447615207773701874768875181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d42fe7fc6ede20238460614e10c59c1a4e6a483b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seb.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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