*.oodrive.com

- Oodrive SAS -

Issued by DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

About this certificate

This digital certificate with serial number 05:3c:ca:53:68:f6:16:95:53:87:10:50:45:07:5d:e0 was issued on by DigiCert Ireland Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oodrive SAS

Organization: Oodrive SAS
State / Province: Île-de-France
Locality: Paris
Country: FR

DigiCert Ireland Limited

Organization: DigiCert Ireland Limited
Country: IE

This certificate will expire on

Certificate Details

Serial Number (hex): 05:3c:ca:53:68:f6:16:95:53:87:10:50:45:07:5d:e0
Serial Number (int): 6961781445598038763287896093280919008
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 29:6f:49:86:80:5f:1b:36:9a:70:08:e1:77:20:61:e9:9f:09:f9:d5
AuthorityKeyId: 18:89:e7:af:f0:28:f6:7c:ca:68:05:52:e1:62:d8:91:d6:16:65:60

Fingerprint (sha1): e3:14:d5:20:08:e8:37:30:c1:8f:b6:09:d1:c3:a1:aa:f2:fe:43:8c
Fingerprint (sha256): 20:0b:cb:37:2f:be:5b:18:5c:88:70:29:81:e8:ef:97:a5:ce:a2:e7:91:00:03:07:0d:e2:c5:45:00:19:a3:85

Issuing Certificate URL: http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.eu
CRL Distribution Point: http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl

Check the revocation status for certificate *.oodrive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oodrive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.oodrive.com

Other certificates including the domain name oodrive.com

(limited to 100 certificates)
*.oodrive.com
partner-portal.oodrive.com
snc25pp.snc.oodrive.com
sharing.oodrive.com
wopi.oodrive.com
easysp.oodrive.com
api.sign.oodrive.com
w4int.oodrive.com
*.sbdemo.oodrive.com
*.oodrive.com
status.exolink.com
mail.oodrive.com
pages.oodrive.com
browser.oodrive.com
adbe.oodrive.com
easysharepp.oodrive.com
snc03pp.snc.oodrive.com
careers.oodrive.com
www.oodrive.com
drm1.oodrive.com
easysp.oodrive.com
swiss-sharing.oodrive.com
active-circle.oodrive.com
status.mediaconnect.no
konstatus.konverto.eu
fnac-sauvegardepp.oodrive.com
drm1.oodrive.com
portal.oodrive.com
easysharepp.oodrive.com
easypp.oodrive.com
banking.oodrive.com
status.beckers-group.com
status.jp.inbenta.com
status.autospf.com
*.orphea-studio.oodrive.com
digital.oodrive.com
easypartner.oodrive.com
arkea.oodrive.com
snc07pp.snc.oodrive.com
*.smartbrowser.oodrive.com
status.waps.solutions
mail.oodrive.com
zimmail04.oodrive.com
snc26pp.snc.oodrive.com
airliquide-pp.oodrive.com
digitalv5.oodrive.com
adserveur.oodrive.com
postfiles.oodrive.com
www.oodrive.com
status.mediaconnect.no
*.oodrive.com
status.autospf.com
*.oodrive.com
partner-portal.oodrive.com
preprod-banking.oodrive.com
status.beckers-group.com
pp-iextranet-p2.oodrive.com
sharing.oodrive.com
konstatus.konverto.eu
adbe.oodrive.com
status.waps.solutions
banking.oodrive.com
arkea.oodrive.com
pages.oodrive.com
digitalv5.oodrive.com
digitalpp.oodrive.com
easyshare.oodrive.com
ffu.sharing.oodrive.com
ffu.sharing.oodrive.com
skypp.oodrive.com
digital.oodrive.com
easytransferpp.oodrive.com
easypartner.oodrive.com
internal-sky.oodrive.com
virtualbrowser.oodrive.com
blogbrasil.oodrive.com
monitoringentreprise.oodrive.com
swiss-sharing.oodrive.com
private-sharing.oodrive.com
cloudbreach.oodrive.com
status.warrantywise.co.uk
status.warrantywise.co.uk
snc06.snc.oodrive.com
status.waps.solutions
status.eurabo.be
internal-easyftp.oodrive.com
status.synccentral.eu
swiss-sharing.oodrive.com
navalgroup-pp.oodrive.com
status.autospf.com
snc03.snc.oodrive.com
blogbrasil.oodrive.com
easysp.oodrive.com
internal-backup.oodrive.com
snc05pp.snc.oodrive.com
easysp.oodrive.com
snc02pp.snc.oodrive.com
status.zoho.sa
easypartner.oodrive.com
easypartner.oodrive.com

Certificate

The complete raw certificate details for *.oodrive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzB28l0j5kz1UcF2lmTn
y0ni876kEAef2wtIiQ1D0Edji2lj0oGiCLp/7Zgysh5NFjMlNlMAaeDbUs8Zd0mF
/jei7I+XUYWRKp1/weC1K9KRRfmzjTdBthjQMrcOL9tDL6YpWWyRtddY/NDgTBQG
7cMLgxXzX3MfFmvXosSs9EUp11fI59n2m9uoP9ZEI/pmdIiojKkaZaQolFZEqsT7
fDMo5DUnW9nIMkSmQOc6ZF4KxTY2xSDIS+lHmbtkOPIxhGU3moBIB2vJ/D+kxbd8
W24SXE1nj14oSgnCxaooq0U0DaMTfCkatxoTGFqONl6szw4nEK9NzU6CVTajDuEn
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6961781445598038763287896093280919008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oodrive SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oodrive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24135415051090856676719485504850450229594168383128257425276120537493571329723137300228704698252623486896705609276263664956876855515034921414465723010103346028529613177865125746496341992648115467929142976616991967265097887846701864549527851165650138923129781934954308137615276344986538341864802059697003383542195681499299819033536508366775022464492855288985409514230207317331053886561028679122730315507804665528025241762066804709957610435320784600796622029447824700763381691273327344045066729472209639011052756930354925290554059013744564560729625932387190777246904060737214054001125345663390857972006882436579099485963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1889e7aff028f67cca680552e162d891d6166560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							296f4986805f1b369a7008e1772061e99f09f9d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oodrive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.eu/DigiCertG2TLSEURSA4096SHA3842022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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