simulateur.eau.veolia.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:54:46:a1:e9:30:2c:48:53:99:9b:96:20:2e:9a:a5:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=simulateur.eau.veolia.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:54:46:a1:e9:30:2c:48:53:99:9b:96:20:2e:9a:a5:9c
Serial Number (int): 270636503598515125693143281488154502800796
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:9a:c9:2b:b4:70:da:3e:c1:eb:03:24:66:0f:6d:40:75:51:3c:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:26:bc:7e:3e:3f:ba:25:89:bb:0c:9a:8c:0f:ce:71:c4:ba:3e:4f
Fingerprint (sha256): 21:35:7e:4d:5d:48:4d:eb:27:19:ed:01:25:93:34:45:1b:5b:36:fc:d8:73:b8:bd:19:36:ed:6a:51:dc:c4:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate simulateur.eau.veolia.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for simulateur.eau.veolia.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

simulateur.eau.veolia.fr

Other certificates including the domain name veolia.fr

(limited to 100 certificates)
token.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
acquia-sites.com
www.veolia.com
*.recyclage.veolia.fr
www.veolia.com
hv360.veolia.fr
veolia.fr
sni.cloudflaressl.com
dir-mjk.veolia.fr
acquia-sites.com
www.chroneau.veolia.fr
sni.cloudflaressl.com
hv360.veolia.fr
acquia-sites.com
arcgisp.veolia.fr
sni.cloudflaressl.com
pp-compte-perseau.veolia.fr
energie.hv360.veolia.fr
veoliaeau.fr
rlv.veolia.fr
atlas.hv360.veolia.fr
www.veolia.com
parking-chrysalis.recyclage.veolia.fr
acquia-sites.com
acquia-sites.com
rec-cartocom.veolia.fr
compteurs.hv360.veolia.fr
lineo-national.m-ve.com
analytics.veolia.fr
rec-arcgiss.veolia.fr
mondiag.eau.veolia.fr
energie.hv360.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
simulateur.vedif.eau.veolia.fr
acquia-sites.com
*.recyclage.veolia.fr
rec-monappli.veolia.fr
rec-monacces.veolia.fr
experience.eau.veolia.fr
www.veolia.com
int-chroneau.veolia.fr
simulateur.eau.veolia.fr
energie.hv360.veolia.fr
analytics.veolia.fr
sni.cloudflaressl.com
*.recyclage.veolia.fr
www.veolia.com
acquia-sites.com
*.recyclage.veolia.fr
sni.cloudflaressl.com
formation.veolia.fr
sinistres-litiges.eau.veolia.fr
rec-monappli.veolia.fr
monappli.veolia.fr
bpartner.eau.veolia.fr
dir-proxy-esb.veolia.fr
experience.eau.veolia.fr
rec-monacces.veolia.fr
rec-rlv.veolia.fr
hv360.veolia.fr
vams-tst.m-ve.com
pp-mallette.veolia.fr
rec-rlv.veolia.fr
monportail.veolia.fr
mdm.recyclage.veolia.fr
rec.api.eau.veolia.fr
www.veolia.com
experience.eau.veolia.fr
sni.cloudflaressl.com
acquia-sites.com
acquia-sites.com
energie.hv360.veolia.fr
recette3-travo.veolia.fr
monbureau.eau.veolia.fr
diag-and-drop.veolia.fr
portail-commercial.veolia.fr
int-chroneau.veolia.fr
compteurs.hv360.veolia.fr
www.veolia.com
lettre-veoliaeau.fr
*.energie.veolia.fr
acquia-sites.com
www.veolia.com
simulateur.eau.veolia.fr
pp-portail-commercial.veolia.fr
acquia-sites.com
www.veolia.com
acquia-sites.com
rec-monappli.veolia.fr
simulateur.eau.veolia.fr
acquia-sites.com
sni.cloudflaressl.com
integration-mobilite.veolia.fr
www.veolia.com
www.veolia.com
acquia-sites.com
metropolerouenouest.eau.veolia.fr

Certificate

The complete raw certificate details for simulateur.eau.veolia.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhyBY8Px98jD8b2cvCBn
op1rf1+/kYFCOlG7FZfQpm0asAEFya+bgRPpn2WWxxBK28Ts4BSaHF3qwZRynxwW
48jqSjU1aFBTHjYTwO++Vr6Xd74/3R9PUAYrdbyO6v9wAdIpILvmwWpKxdrbMTWe
AnUNUekqm59YE2t7HXiFaOD0X/2G2Zm0x52vkHLLtDaKDu3vLjy5GFLV91FOgOsy
PmuXLSsoE/T7yWUzJFC7csEqUz/F7YrL994QeJVWi+1TPOAHFHPzwpfWv9jxrsqq
1rk5JTRjWIHFbYuTIvn1lshTjKYflD3HeayNfaCJhfIJ50thmCr4GQQeFFr5QLEJ
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270636503598515125693143281488154502800796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 09:22:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 09:22:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'simulateur.eau.veolia.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17939895855892833581153684657201284891350379341159884205634398798121129040682194811537724537578600775127066926503542140601228227711748936249253602326886342841443972301298563142516490378803339228555429688298385541491623480647366729232204137405866110026656768299424751302162176040234103412689918207357317477728234774452436011356707643384990895535780192419016323593695894015007967615816286419880482110808193034648129244897340583286886663991829839282731403106981749619534481633847851963196335818735391506126576037445685068840918925930640471143431513951996431541827043224810194236201091451066261198164317313263690971154897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							659ac92bb470da3ec1eb0324660f6d4075513c6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulateur.eau.veolia.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001697bb9cb450000040300473045022100a673b015eb06fb7b64665b78b0a3e8a1f3082136a9434981ae9bad1b5942427802203d97e589103e1449a034bf97954cdb03fbac7c739c0e10260f7921adeee78e35007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001697bb9cd390000040300463044022032ab4e88eba6d42cb3402d2ba236a281245fb7b9b889d27caa3e2dbdbf299423022004f86c0ed1b23151ff90fdb1b8254a049f7275eaab9381fb4a6dc3245257de0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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