presse.vous.sncf-connect.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:24:9d:4e:f0:36:e2:f1:e6:86:3f:5c:64:96:42:72:43 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=presse.vous.sncf-connect.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:24:9d:4e:f0:36:e2:f1:e6:86:3f:5c:64:96:42:72:43
Serial Number (int): 312768164199857189500565547262778932359747
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:38:f4:ae:e4:01:bd:e8:cd:d2:c3:ee:f0:93:ae:33:8e:44:17:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:92:32:0e:3f:c0:e6:00:c3:a0:b1:21:09:1d:fa:13:7d:01:23:f0
Fingerprint (sha256): 1f:e8:e6:4d:b7:75:2e:fb:cf:9e:b9:4a:c5:e6:4f:b7:1b:28:cb:bf:82:00:49:5b:e8:a1:5e:ae:b5:f5:5c:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate presse.vous.sncf-connect.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for presse.vous.sncf-connect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

presse.ouitalk.oui.sncf
presse.vous.sncf-connect.com

Other certificates including the domain name sncf-connect.com

(limited to 100 certificates)
wiz.sncf-connect.com
hiflow.sncf-connect.com
sncfconnect.com
m3.mail.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
sncf.com
sncf.com
wiz.sncf-connect.com
preprod.partenaires.sncf-connect.com
r.satisfaction.sncf-connect.com
juniorcie.sncf-connect.com
wiz.sncf-connect.com
monchauffeur.sncf-connect.com
presse.ouitalk.oui.sncf
ibis.sncf-connect.com
mirror.avis.co.uk
m.mail.sncf-connect.com
juniorcie.sncf-connect.com
r.satisfaction.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
m4.mail.sncf-connect.com
vous.sncf-connect.com
res4.mail.sncf-connect.com
all.sncf-connect.com
presse.ouitalk.oui.sncf
wiz.sncf-connect.com
wiz.sncf-connect.com
presse.vous.sncf-connect.com
m7.service.sncf-connect.com
hiflow.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
wiz.sncf-connect.com
wiz.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
sncf-connect.com
presse.ouitalk.oui.sncf
hiflow.sncf-connect.com
sncfconnect.com
ibis.sncf-connect.com
*.reseau.sncf.fr
sncf.com
monchauffeur.sncf-connect.com
lebar.sncf-connect.com
vous.sncf-connect.com
*.sncf-connect.com
monchauffeur.sncf-connect.com
all.sncf-connect.com
mirror.avis.co.uk
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
hiflow.sncf-connect.com
*.reseau.sncf.fr
preprod.ibis.sncf-connect.com
*.monidentifiant.sncf
uat.avis.co.uk
hiflow.sncf-connect.com
t.mail.sncf-connect.com
presse.ouitalk.oui.sncf
wildcard.sncf-connect.com
vous.sncf-connect.com
monchauffeur.sncf-connect.com
restaurationabord.sncf-connect.com
presse.vous.sncf-connect.com
preprod-inspirations.sncf-connect.com
vous.sncf-connect.com
forms.sncf-connect.com
partenaires.sncf-connect.com
sncf-connect.com
presse.vous.sncf-connect.com
r.satisfaction.sncf-connect.com
r.satisfaction.sncf-connect.com
vous.sncf-connect.com
mesbagages.sncf-connect.com
monchauffeur.sncf-connect.com
vous.sncf-connect.com
uat.vous.sncf-connect.com
mesbagages.sncf-connect.com
preprod-inspirations.sncf-connect.com
r.satisfaction.sncf-connect.com
lebar.sncf-connect.com
presse.ouitalk.oui.sncf
*.sncf-connect.com
all.sncf-connect.com
hiflow.sncf-connect.com
ibis.sncf-connect.com
monchauffeur.sncf-connect.com
r.satisfaction.sncf-connect.com
presse.vous.sncf-connect.com
sncf.com
sncfconnect.com
r.satisfaction.sncf-connect.com
*.avisworld.com
res.mail.sncf-connect.com
t5.mail.sncf-connect.com
r.satisfaction.sncf-connect.com

Certificate

The complete raw certificate details for presse.vous.sncf-connect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9w2529lfjFsuQpTIL/Nz
ipcLFg1Acl/loI8ddMzk9hP+A0Zt89MQT24ZHdvfc4zwLa0MFchk2E/ijlhGq4KK
f/+aGfKZEdogFT8iLZif1f+D7lh5RoI2iZgU3rllEfDN3KVfTzl2qXbtD1wQPJCC
SHfz56c/aTtSsOz7G668Bo0uv6QkcQYILI/IboakHuQrS4Qgmr+lscSY+I2qUUBX
JSLHdcIFllpV4t7frj9xAqojueXdQ20idwCZ6rejPCVtJs8puzmJ9z62a4p0+DOG
+rLW+hAa8wor76hl5mA7/rKRRMr6wXulKqmmJeR0B/gKbxV4wQQEY+7c9xvwV1/J
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312768164199857189500565547262778932359747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 04:12:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-03 04:12:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'presse.vous.sncf-connect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31187629874849275926576847635776837411564125878416504502218499024802603453656981352463828316384409000741433233612110640731393303912282968370216405456747905505648953398116029883161875864868176889644626767709263472151944595935066903070080655387739540605541783881146636415204449139424162805595049357287875128606133139630857523405231289178177601976660420477699114103235639259975177953099196632892561303774365024651354847274846518400646812487948801607005850962584189531388086154986697029900612581163408149166197041574560428000034026531996304626775651937169027781867139052400791849587949500734297336151840195037096902117807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b138f4aee401bde8cdd2c3eef093ae338e441718
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presse.ouitalk.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presse.vous.sncf-connect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ff2fd7a6a0000040300483046022100b284580324a12bbd811fa94b6fc825d72967df5f8f01c2680b9f4b3f14e0744e022100eb74f5f404fb449dbbd044a89cfaf5e09e4e0db765057b5e30adf575fc3a59b60075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017ff2fd7ada000004030046304402204e251a1169225d35dfcb8b65a492a7fcf21c2e4f87961d3b72471e6033aee0fc0220721fa7fa3131a8479be401ce7d73d6d9e06c6e9696968877f0c6160c260c2a50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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