soprasteria.com

- SOPRA STERIA GROUP -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 34:a5:c5:30:14:23:e0:dd:d3:cf:89:9c:98:b2:59:49 was issued on by thawte, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

SOPRA STERIA GROUP

Organization: SOPRA STERIA GROUP
State / Province: HAUTE-SAVOIE
Locality: ANNECY LE VIEUX
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:a5:c5:30:14:23:e0:dd:d3:cf:89:9c:98:b2:59:49
Serial Number (int): 69980584206350666515665806581312936265
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): a7:94:cf:fe:42:ab:fd:b7:e2:f1:84:b1:25:09:45:a7:9c:13:16:dd
Fingerprint (sha256): 21:85:df:4c:9c:b9:30:07:65:68:44:9c:45:53:bd:43:91:f4:ec:07:71:76:d7:57:68:e2:1d:0f:e5:d4:13:8f

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate soprasteria.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soprasteria.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.constellation.soprasteria.com
*.soprasteria.com
soprasteria.com
www.soprasteria.com

Other certificates including the domain name soprasteria.com

(limited to 100 certificates)
svs.soprasteria.com
soprasteria.com
blog.soprasteria.com
innersource.soprasteria.com
soprasteria.com
blog.soprasteria.com
blog.soprasteria.com
webext.soprasteria.com
soprasteria.com
soprahr.tn.web.soprasteria.com
via22latam.workspace.training
agenciasur.soprasteria.com
go.soprasteria.com
rpa.soprasteria.com
soprasteria.com
blog.soprasteria.com
www.soprasteria.com
soprasteria.com
active3d.soprasteria.com
cdn.soprasteria.com
soprasteria.com
mgw08.soprasteria.com
solpm.sciforma.soprasteria.com
soprasteria.com
vpn-in.soprasteria.com
www.soprasteria.com
svncassiopae.soprasteria.com
soprasteria.com
digitaldesk.soprasteria.com
ras-ghc.soprasteria.com
svs.soprasteria.com
www.isacampillo.com.mx
*.sbs.msuk.soprasteria.com
vpn-uk.soprasteria.com
soprasteria.com
soprasteria.com
preprod.digitaldesk.soprasteria.com
videoconferencing.soprasteria.com
mgw02.soprasteria.com
speed.soprasteria.com
cci-paris-idf-a3d-rec.soprasteria.com
gda-grs.soprasteria.com
www.soprasteria.com
soprasteria.com
soprasteria.com
parici.soprasteria.com
parici.soprasteria.com
blogtech.soprasteria.com
soprasteria.com
agenciasur.soprasteria.com
soprasteria.com
portal.restricted.soprasteria.com
blogtech.soprasteria.com
www.soprasteria.com
digibox.soprasteria.com
webext.soprasteria.com
app.ameicontabilidadeonline.com.br
soprasteria.com
soprasteria.com
slnxoccitaniekeycloak01.soprasteria.com
*.sit.fes.soprasteria.com
worktime.soprasteria.com
klif.f2fmobile.soprasteria.com
digitaldesk.soprasteria.com
svs.soprasteria.com
soprasteria.com
soprasteria.com
svs.soprasteria.com
digibox.soprasteria.com
ras-ghc.soprasteria.com
soprasteria.com
blog.soprasteria.com
quill.morishin.me
*.dev.fes.soprasteria.com
*.trn.fes.soprasteria.com
livingactor.soprasteria.com
soprasteria.com
uat.digitaldesk.soprasteria.com
api.cicd.arcus.soprasteria.com
staff.soprasteria.com
soprasteria.com
soprasteria.com
dev.digitaldesk.soprasteria.com
csadeo-wekan.soprasteria.com
soprasteria.com
soprasteria.com
blog.soprasteria.com
portal.soprasteria.com
uat.digitaldesk.soprasteria.com
soprasteria.com
remote.siiecome.soprasteria.com
soprasteria.com
blog.soprasteria.com
staff.soprasteria.com
blog.soprasteria.com
*.apps.cicd.arcus.soprasteria.com
diwocs.soprasteria.com
klif.vpn.soprasteria.com
blog.soprasteria.com
soprasteria.com

Certificate

The complete raw certificate details for soprasteria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MIllVG0NqamAMUJXcAE
s4O/85OpyXz2YwL+2PI3LoKL415mTzZyzzVTmjpk9jwdm4qDcQqP38CZShNAPEjB
FGsIPo5223OQOlHDF2kbsWoRuFk4HMXNUYE2WShnX+zVpUHk3i+JEEq5ACynvy7h
EsPiPlW7qXuM5QlnO7Bbmi6L0XHEDnobKdDA6jjj+Ib2Qc+oM3z5JpyOtb1PYh2W
C7C1G2eb71R1tB2gX7J4yed6dzxhhoTo6qSAzzEQiXCIAD8zFWNCPf/ahPzez71Q
Dk5OJm9SfqLU6tPELkildvfS2dIukzAVZCN++wscgcMnaBuvm3vJQ7xqc+FDFYuP
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69980584206350666515665806581312936265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HAUTE-SAVOIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ANNECY LE VIEUX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOPRA STERIA GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'soprasteria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29383024112158837827870109565915634888366202730625862023704051437477887695684420115567705600578593702919852462402058292597887900368909066698431135127943042794984694892391594574071985573815994804573943057486146395008762757923750217191257863979036996679227833079310933670672837922146192614107253663566452635439731590937367493540674186563413465421351576803454326321292629569870643343678504890637534417141555419767186433609747845116390980897295514362466155540909419305384227037701232433176279876135463223062305232030693284071330578143350215945149067177401669601485623109224099620275607194831093996263232614594131624955883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constellation.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soprasteria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soprasteria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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