relevermoncompteur.erdfdistribution.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:c4:22:44:c8:2b:43:d1:07:2f:25:bf:1b:68:cb:34:da was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:c4:22:44:c8:2b:43:d1:07:2f:25:bf:1b:68:cb:34:da
Serial Number (int): 1492398885568645071373851977634115677271258
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: e1:bc:cb:04:ea:97:e5:15:70:92:b9:90:4a:ed:fc:22:3f:a6:4d:f0
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 1a:12:82:de:c8:03:cb:b1:2c:6b:87:d9:11:40:06:90:b9:e5:55:db
Fingerprint (sha256): 22:3f:c2:75:93:25:6b:9c:d0:f2:55:7f:b2:1b:a3:eb:ec:85:f4:f5:9b:21:ac:ba:d2:93:f4:43:65:05:d6:f5


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate relevermoncompteur.erdfdistribution.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for relevermoncompteur.erdfdistribution.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

relevermoncompteur.erdfdistribution.fr

Other certificates including the domain name erdfdistribution.fr

(limited to 100 certificates)
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
colloc2.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
ccd.erdfdistribution.fr
portail-osr-prestataires.enedis.fr
enedis.fr
brandcenter.enedis.fr
relevermoncompteur.erdfdistribution.fr
deploik.sid.erdfdistribution.fr
colloc.erdfdistribution.fr
perm.erdfdistribution.fr
perm.erdfdistribution.fr
enedis.fr
noedmzplywfe001.intranet.edf.com
enedis.fr
pilotin-dev.erdfdistribution.fr
herakles.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
fournisseursderdf.erdfdistribution.fr
distri-pictrel.edf.fr
colloc.erdfdistribution.fr
perm.enedis.fr
relevermoncompteur.erdfdistribution.fr
prac-pre-prod-internet.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
etoile-rh.edf.fr
portail-osr-prestataires.erdfdistribution.fr
brandcenter.enedis.fr
perm.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
connect-racco.erdfdistribution.fr
ccdsecours.erdfdistribution.fr
perm.erdfdistribution.fr
srk.pprd.sid.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
pcydmzplywfe001.intranet.edf.com
distri-pictrel.edf.fr
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
herakles.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc-perf.erdfdistribution.fr
ccd.erdfdistribution.fr
herakles.erdfdistribution.fr
brandcenter.enedis.fr
ccdsecours.erdfdistribution.fr
PCYINTPLYPFE001.neoprod.edf.fr
brandcenter.enedis.fr
relevermoncompteur.enedis.fr
pcydmzplywfe001.intranet.edf.com
perm.erdfdistribution.fr
perm.erdfdistribution.fr
connect-racco.enedis.fr
portail-osr-prestataires.erdfdistribution.fr
mediabox.erdfdistribution.fr
herakles-pp.erdfdistribution.fr
brandcenter.enedis.fr
pcydmzplywfe002.intranet.edf.com
relevermoncompteur.erdfdistribution.fr
brandcenter.enedis.fr
portail-osr-prestataires.enedis.fr
cko-osb-recf.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
enedis.fr
connect-racco.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
colloc.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
noedmzplywdi001.intranet.edf.com
noedmzplywfe001.intranet.edf.com
www.erdfdistribution.fr
noedmzplywfe002.intranet.edf.com
etoile-rh.edf.fr
deploic.sid.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
connect-racco.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
pcydmzplywfe001.intranet.edf.com
rh-planete-formation.edf.fr
herakles.erdfdistribution.fr

Certificate

The complete raw certificate details for relevermoncompteur.erdfdistribution.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8QdaCyWKrfkjrJnu29
UnK88IakeIP2qkEhV/VeR93Q/fh/0looWLTAt9Ea0fEWtPagRpgHvczvXMEEY9V7
8cJ7gUYTn6OCUyzOP2Hk8n3gng4AbGxaBY3uZEf8IPV3lGPhtoKx2Amq1h2GutWs
/AtDDkku3V0MbJDjv6YOz+iG0hy/H3xLjSF0hMcXQrIAocKhrjyt5G2gQg/CRr2b
PfGnH8m1syZayMTK+tAGIPUEYppXygd8XTbt9XSIuZfW0y4obMUJFJWgD9q/giS9
agS3YTOWEpNrMGumYQUUhr+UEVTdBRhBxMCpplYzm0TLFVi7DkY3vijjv/En4r1t
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492398885568645071373851977634115677271258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-05 09:55:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-05 09:55:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'relevermoncompteur.erdfdistribution.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22580415387400406538766533307324346909425994944572769513906278427396550353435207915548156919851369751382855350701570439578696164135559547774483661256102640479283151262681009242418941079483640669505575110250481239035515318903748733624069312028961257324228962218428754201332139478656644363751316310013899406642504430520650039351025642305391649016443134454253756776660725560164638066212242434346722033578571281919579917589801760020499750725978113894845927829932984498117805206988874152297508906773393016627322946189217696209145178349513828534061799432035530017357826025983648509328919935860654948227225217263873323527481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relevermoncompteur.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1bccb04ea97e5157092b9904aedfc223fa64df0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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