desk-dr.asi.sgcib.com

- Societe Generale -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 59:55:5f:88:6e:2b:1c:09:79:86:11:d7:6e:b0:ae:59 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Societe Generale

Organization: Societe Generale
Organization unit: SGCIB
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Hauts de Seine
Locality: Paris La Defense
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:55:5f:88:6e:2b:1c:09:79:86:11:d7:6e:b0:ae:59
Serial Number (int): 118744574495870889177134418033915244121
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): e2:f3:28:c3:05:b5:a6:bc:12:72:f6:76:68:e8:bb:62:8f:85:43:c1
Fingerprint (sha256): 20:e3:e0:84:a7:f7:a3:d2:27:f4:bd:13:37:1e:5a:20:ac:9b:34:40:89:a9:0c:ef:1d:1a:dd:a1:52:75:c3:a9

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate desk-dr.asi.sgcib.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desk-dr.asi.sgcib.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desk-dr.asi.sgcib.com

Other certificates including the domain name sgcib.com

(limited to 100 certificates)
desk-dr.ame.sgcib.com
desk-sso-uat.asi.sgcib.com
ws-dir-apac-01.socgen.com
bbk.ebics.de.sgcib.com
desk-dr.ind.sgcib.com
sgmarkets.com
teste-assinar.ame.sgcib.com
sgmarkets.com
fx-streaming.sgcib.com
myhedge-staging.sgmarkets.com
access-apac.im.socgen.com
www.erec.sgcib.com
desk-sso.eur.sgcib.com
sgpulseuat.sgcib.com
desk.ame.sgcib.com
desk.ind.sgcib.com
valuation.sgmarkets.com
www.warrants.com
desk-dr.ame.sgcib.com
desk.ind.sgcib.com
join.socgen.com
parmail.sgcib.com
desk-dr.ind.sgcib.com
ic.sgmarkets.com
www.erec.sgcib.com
desk-uat.asi.sgcib.com
global.societegenerale.com
www.ebics.de.sgcib.com
sgmarkets.com
www.ebics.de.sgcib.com
www.warrants.com
desk.ame.sgcib.com
c-access.asiapac.sgcib.com
access-apac-01.socgen.com
ataccess-uat.socgen.com
ataccess.socgen.com
www.solutions.sgcib.com
desk.asi.sgcib.com
listedstructuredproducts.com
www.ebics.de.sgcib.com
listedstructuredproducts.com
www.warrants.com
alpha.sgcib.com
confirmation.sgmarkets.com
www.solutions.sgcib.com
access.im.sogetest.com
desk.asi.sgcib.com
newpulse.sgcib.com
www.warrants.com
www.ebics.de.sgcib.com
events.sgcib.com
desk-dr.asi.sgcib.com
altura.sgcib.com
Ws-dir-apac-01.socgen.com
events.sgcib.com
desk-dr.eur.sgcib.com
access.im.socgen.com
www.warrants.com
access-emea-01.socgen.com
pulse.sgcib.com
homo.webadmin.societegenerale.com
ataccess-uat.socgen.com
ef-market-intelligence.sgcib.com
desk.sgcib.com
www.warrants.com
valuation.sgmarkets.com
mail.iap.socgen.com
ic.sgmarkets.com
desk-dr.asi.sgcib.com
www.privatebanking.societegenerale.com
desk-sso.asi.sgcib.com
desk-dr.ind.sgcib.com
bbk.ebics.de.sgcib.com
solutions.sgcib.com
www.privatebanking.societegenerale.com
desk.eur.sgcib.com
assinar.ame.sgcib.com
econf.sgib.com
www.sgcib.com
shield.sgcib.com
www.warrants.com
www.warrants.com
desk.ind.sgcib.com
global.societegenerale.com
join.socgen.com
sgmarkets.com
assinar.ame.sgcib.com
societegenerale.se
valuation.sgmarkets.com
www.ebics.de.sgcib.com
econf.sgcib.com
solutions.sgcib.com
desk.ame.sgcib.com
desk-sso.eur.sgcib.com
desk-uat.eur.sgcib.com
solutions.sgcib.com
join.im.sogetest.com
pulseuat.sgcib.com
global.societegenerale.com
confirmation.sgmarkets.com

Certificate

The complete raw certificate details for desk-dr.asi.sgcib.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9/48BSSVh7C4R1sOUq9
SdvRvBmD+wGwIrd4IB8AV0wa+cK1mr+Z1nMEAHyHHugSYH0AXI0/m3gEh/e2pbx3
ffuH0QthX9yqe9HwHffKGjqsApkj0UWAPTsrqIHiZRyHCuwkBoS3Tkz/WEBD0lpg
u8FM8g+NNoPUjH7qYqVp58/c9GXo7nXXKBtX3Ek3CQHplLKr1C2YDMmvSJ49dwvo
XhiDrla/NfijcUxKbYPIUHvabHYzi+QoAicTTFFF8GKjqghJ5Nozg0o+a/x9BUU+
xLWdm8ezNjsDKhkZ4I5RxPj/R7+tRSZ6M+fTZ4h7coKp/haO6dCb3N3KUMcY+Trp
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118744574495870889177134418033915244121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Paris La Defense'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SGCIB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'desk-dr.asi.sgcib.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25736820821463947077778624505411677690095751169128089348479098307332675926529690010653286514862505335564532218929147056321911702012683803490697991015064344666671134962939196427031455988634328668997941188825243692196247579986626022156565646571300323259092333750427105086154247601704445495139970917739270856508927456093808836014522836933697998843197209476341717089591838606808698146618189772173823551425937088438918153947836621314029715895479809765215872363963662127460011470302949889174245067876857860525715536710064809423439287618397824271809526540757598206099743663459312334650689948852485182569074896482776066484613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk-dr.asi.sgcib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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