desk.asi.sgcib.com

- Societe Generale SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:1a:ce:bc:1d:c3:0a:83:d3:de:8b:af:eb:79:2c:54 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:1a:ce:bc:1d:c3:0a:83:d3:de:8b:af:eb:79:2c:54
Serial Number (int): 14760700752439740521185426696679533652
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:e3:fb:8f:af:e9:cf:a8:84:ca:00:90:ff:c7:6e:ac:53:49:a4:23
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 31:0d:a0:50:4e:bd:5b:fe:47:6b:ad:7e:a5:10:e5:f9:8b:a2:b6:db
Fingerprint (sha256): 1d:f1:4e:67:e7:05:e0:a7:f5:18:ca:44:dd:3e:93:29:c6:c2:c2:51:47:4d:02:af:63:7b:b2:87:03:8c:db:13

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate desk.asi.sgcib.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desk.asi.sgcib.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desk.asi.sgcib.com
desk-dr.asi.sgcib.com

Other certificates including the domain name sgcib.com

(limited to 100 certificates)
desk-dr.ame.sgcib.com
desk-sso-uat.asi.sgcib.com
ws-dir-apac-01.socgen.com
bbk.ebics.de.sgcib.com
desk-dr.ind.sgcib.com
sgmarkets.com
teste-assinar.ame.sgcib.com
sgmarkets.com
fx-streaming.sgcib.com
myhedge-staging.sgmarkets.com
access-apac.im.socgen.com
www.erec.sgcib.com
desk-sso.eur.sgcib.com
sgpulseuat.sgcib.com
desk.ame.sgcib.com
desk.ind.sgcib.com
valuation.sgmarkets.com
www.warrants.com
desk-dr.ame.sgcib.com
desk.ind.sgcib.com
join.socgen.com
parmail.sgcib.com
desk-dr.ind.sgcib.com
ic.sgmarkets.com
www.erec.sgcib.com
desk-uat.asi.sgcib.com
global.societegenerale.com
www.ebics.de.sgcib.com
sgmarkets.com
www.ebics.de.sgcib.com
www.warrants.com
desk.ame.sgcib.com
c-access.asiapac.sgcib.com
access-apac-01.socgen.com
ataccess-uat.socgen.com
ataccess.socgen.com
www.solutions.sgcib.com
desk.asi.sgcib.com
listedstructuredproducts.com
www.ebics.de.sgcib.com
listedstructuredproducts.com
www.warrants.com
alpha.sgcib.com
confirmation.sgmarkets.com
www.solutions.sgcib.com
access.im.sogetest.com
desk.asi.sgcib.com
newpulse.sgcib.com
www.warrants.com
www.ebics.de.sgcib.com
events.sgcib.com
desk-dr.asi.sgcib.com
altura.sgcib.com
Ws-dir-apac-01.socgen.com
events.sgcib.com
desk-dr.eur.sgcib.com
access.im.socgen.com
www.warrants.com
access-emea-01.socgen.com
pulse.sgcib.com
homo.webadmin.societegenerale.com
ataccess-uat.socgen.com
ef-market-intelligence.sgcib.com
desk.sgcib.com
www.warrants.com
valuation.sgmarkets.com
mail.iap.socgen.com
ic.sgmarkets.com
desk-dr.asi.sgcib.com
www.privatebanking.societegenerale.com
desk-sso.asi.sgcib.com
desk-dr.ind.sgcib.com
bbk.ebics.de.sgcib.com
solutions.sgcib.com
www.privatebanking.societegenerale.com
desk.eur.sgcib.com
assinar.ame.sgcib.com
econf.sgib.com
www.sgcib.com
shield.sgcib.com
www.warrants.com
www.warrants.com
desk.ind.sgcib.com
global.societegenerale.com
join.socgen.com
sgmarkets.com
assinar.ame.sgcib.com
societegenerale.se
valuation.sgmarkets.com
www.ebics.de.sgcib.com
econf.sgcib.com
solutions.sgcib.com
desk.ame.sgcib.com
desk-sso.eur.sgcib.com
desk-uat.eur.sgcib.com
solutions.sgcib.com
join.im.sogetest.com
pulseuat.sgcib.com
global.societegenerale.com
confirmation.sgmarkets.com

Certificate

The complete raw certificate details for desk.asi.sgcib.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7lxr0Ek4CWqwDJiTmbR
YLBpH4EqfhfIiN/o7OyA8Tq26CHWay+Is3jPw73H6+gPGYSz9sjBHNCYEiCB20m8
gtavYhUXbHdvulOQtHXkfcZty+Dn/xP9L94aMACU9dFNi47rWMACNEDAzrhZuayO
vj+2Is+8yp3fzfat3bl5DpLAz6PA+f3E7yuvtVMdTsKkhQ7izmYZu8iPek2stK9G
V9Yb4leYrhsMuptF8UePz/enIb3P8HiGASptkJsWHrsbzxNicDERlSfaWsRTr5BJ
DWuuWW6/x3C+AGuODhGQH2F3Ycv7gH+LR307oH7eshNO9oXEIu6aPyMsMlvIz6lv
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14760700752439740521185426696679533652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desk.asi.sgcib.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24202962132807560789243268790240121841661574002665896380835227062566621220697335537003993854388831984035528591063713035705902525152296052595914595374747248552241989237579015591177525100271678938751426927131453228379631299506540477772714645673775404384350626839720824228611004664283247927096548074647262295531467906789662420974881735133031787629889737733198261883387231465012906552214555838580747493983334448477786534279459064342251773602024922609497978414492561637440489925400697884205757241484963927743969768781050105926305787398913807632500470666810783749125281825191196607329783998948256910046334597669623410814777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8e3fb8fafe9cfa884ca0090ffc76eac5349a423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.asi.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk-dr.asi.sgcib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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