dysperse.inrae.fr

- INRAE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 18:e1:b9:9d:b7:7e:d0:9c:4e:8d:6e:75:19:d3:71:de was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

INRAE

Organization: INRAE
State / Province: Ile-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 18:e1:b9:9d:b7:7e:d0:9c:4e:8d:6e:75:19:d3:71:de
Serial Number (int): 33073503433395574050798568542131417566
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 1f:c5:3b:1c:29:96:42:fb:bf:54:ef:49:9a:f9:53:56:47:94:dd:65
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 3b:49:90:df:fe:91:0f:c6:67:c8:e9:ac:6b:86:bd:19:96:69:68:9d
Fingerprint (sha256): 20:8f:df:4d:34:20:40:ca:cc:e4:fb:c7:d9:26:23:e7:a6:05:eb:56:08:9d:f2:54:8f:74:ec:3c:38:b2:33:f6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate dysperse.inrae.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dysperse.inrae.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dysperse.inrae.fr
dysperse.irstea.fr

Other certificates including the domain name inrae.fr

(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
renk.roazhon.inra.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
vmi-prod-557.dcidf.inrae.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
pmad-preproduction.inrae.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr

Certificate

The complete raw certificate details for dysperse.inrae.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspsP4BWnEJFRFn/pJnLn
B0XrBgkx2qktzhGWdE6IPw2wmEx9eoIVSIsOQSAFtC878BViEdnofa+R1oH5dLOz
8vZFa2G3aEXa2qftRoBgN2GY6FaYyDZlCm092F7TMSOrqcDZYppwS5JVvu3i20u7
hM6EIn94MlVsCF5MJ01JMiAKwokh0tvwi2ab0i0EIjls1nwk1dt+zT8tRA+lT4X9
V1trELEqtOjbnsBfShxGVK5CNunCjDvZBPHdGJS8ZfaXMK1n+bsa4Qm3CWvBu5sp
qlQgNn48l4UhwOec1ZyM54EBy7ZPbRjz6CL/4rms3+ua9IaZ+RXrpBNgub/jMHeq
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33073503433395574050798568542131417566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dysperse.inrae.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22546882212422984313595378808593455183836900609994636719616178564074119692315399222485439330552317650002394067034621380165853238400500115179714628041292637292771606808346991636180607391189598019044587684333953890650581115750667530379146231286543688756834083526091441939622926245677029324746117022614921783804712927305396666190760598110609913773169471940171234590716863602204607256124024305242442461255216406484618897417593443684322776578927485176677853205423574210552907512816301678892665191374767736382880603969832994335330444367081343293734531670120612039697542378817388323524740864327914804551479103372652067662501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fc53b1c299642fbbf54ef499af953564794dd65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dysperse.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dysperse.irstea.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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