*.parisfashionshops.com

- PARIS FASHION SHOPS-PFS -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 7b:cc:ba:24:95:1f:99:0a:12:2b:3f:84:39:79:ea:13 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PARIS FASHION SHOPS-PFS

Organization: PARIS FASHION SHOPS-PFS
State / Province: PARIS
Locality: PARIS
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:cc:ba:24:95:1f:99:0a:12:2b:3f:84:39:79:ea:13
Serial Number (int): 164558047467237352799240495712999959059
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 00:67:88:68:59:35:c5:ee:a8:19:b2:48:5c:4a:25:b7:d6:ec:3a:fa
Fingerprint (sha256): 22:c8:a1:79:d0:e3:41:c6:0d:32:a7:e8:84:1e:6d:4d:cc:7b:c0:66:a7:bb:13:a8:3f:a6:1e:af:77:2d:5a:1f

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.parisfashionshops.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.parisfashionshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.parisfashionshops.com
parisfashionshops.com

Other certificates including the domain name parisfashionshops.com

(limited to 100 certificates)
intranet.cifa-fashion.com
storage.parisfashionshops.com
www.intranet.cifa-fashion.com
mag.parisfashionshops.com
forms.rmachado.group
mag.parisfashionshops.com
crm.cifa-fashion.com
silkroad.parisfashionshops.com
cifa.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
forms.youcloudit.com
formular.smartpoint.ro
formular.smartpoint.ro
r.newsletter.parisfashionshops.com
sandbox.marketplace.paris
parisfashionshops.com
tw.parisfashionshops.com
silkroad.parisfashionshops.com
silkroad.parisfashionshops.com
forherparis.com
magazine.parisfashionshops.com
forms.rmachado.group
parisfashionshops.eu
silkroad.parisfashionshops.com
forms.rmachado.group
verzeichnis.parisfashionshops.com
cifa.parisfashionshops.com
formular.smartpoint.ro
r.newsletter.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
reco.parisfashionshops.com
reco.parisfashionshops.com
www.pick-up.cifa-fashion.com
r.newsletter.parisfashionshops.com
redmine.parisfashionshops.com
silkroad.parisfashionshops.com
reco.parisfashionshops.com
download.parisfashionshops.com
silkroad.parisfashionshops.com
forms.rmachado.group
old.cifa-fashion.com
forherparis.com
formular.smartpoint.ro
wsn.parisfashionshops.com
redmine.parisfashionshops.com
img.newsletter.parisfashionshops.com
*.parisfashionshops.com
www.old.cifa-fashion.com
formular.smartpoint.ro
formular.smartpoint.ro
www.location.cifa-fashion.com
img.newsletter.parisfashionshops.com
*.parisfashionshops.com
v2.parisfashionshops.com
annuaire.parisfashionshops.com
cifa.parisfashionshops.com
mag.parisfashionshops.com
parisfashionshops.eu
silkroad.parisfashionshops.com
sandbox.marketplace.paris
formular.smartpoint.ro
intranet.cifa-fashion.com
reco.parisfashionshops.com
silkroad.parisfashionshops.com
silkroad.parisfashionshops.com
event.cifa-fashion.com
forms.parisfashionshops.com
cn.cifa-fashion.com
reco.parisfashionshops.com
ru.parisfashionshops.com
formular.smartpoint.ro
directory.parisfashionshops.com
silkroad.parisfashionshops.com
www.intranet.cifa-fashion.com
formular.smartpoint.ro
parisfashionshops.eu
parisfashionshops.eu
forms.rmachado.group
redmine.parisfashionshops.com
v2.parisfashionshops.com
kr.parisfashionshops.com
cn.cifa-fashion.com
tw.parisfashionshops.com
sms.marketplace.paris
img.newsletter.parisfashionshops.com
forms.rmachado.group
formular.smartpoint.ro
cifa.parisfashionshops.com
formular.smartpoint.ro
cn.cifa-fashion.com
parisfashionshops.com
forms.rmachado.group
forms.fehrbraunwalder.ch
directory.parisfashionshops.com
formular.smartpoint.ro
formular.smartpoint.ro
reco.parisfashionshops.com
mag.parisfashionshops.com

Certificate

The complete raw certificate details for *.parisfashionshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/TBOiT16eHCJXZiueAO
ErMzO4woEKl8Y/EDBQseubESMPh7u75/Fa0iJRSzxKFmDBnR6DyS7lxmA9pPZtOx
9u9AOaYkv54jjDAKUWyolSWM7qM0xyi70J8xFFRWIakwpuzj/MlfmRjqeXIhq9Qf
e0Mu8cBKOC7sP+UzQVVPG9NqUbMa5AzoA4G8r8y7c35T768KoHJZ44Z/AWhFsDce
YnR77vY6TRjuf5qE5ivNmDkvl4ilT5DtmwH8VV/+nYVfGX8d7Hm9yPeHGnbGRLg9
KI5OT9JFOuUMO9kPjBBMqhdAkeGwmeOXMASGZUXFcCeTRoreFxELyQm4zXyvS2uZ
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 164558047467237352799240495712999959059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS FASHION SHOPS-PFS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.parisfashionshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30291647973837464849008385093879250778439639329013999403712114973079257654489096507126103732495823965374108413058321405393138140003645069700275078963564006634375621968927818492923673634091366057679241684193452115229196627272143115937292536160614682154258580307586470547810202215171595937518557292701198692997973386645104843581979872285778740415520265290093532846427399172362199747874636659444718851385494845694640362422052140539484932221965804580677744478187075344732830857756114668915629220742904135528031228556543777603275592688085892411055518990091877724683599241989698361052847494027196844458403478451236379531621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parisfashionshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisfashionshops.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bf82636bc00000403004630440220714cf0a7d3601206e699d9d0b5558b625498280baa9bdfed29e5d3b77f67488e02203ce4d2b280d4e4c50a11105742c965b2ee2cb5b202cffea9c28abd928a7ed1db007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bf82636fb000004030046304402200d2326333190c4be9e498347938ddc345bb4f012abedc5e6834a81508928be94022003cbe2136eb5f6c0904b92374f740fa4ae4939cdd1c1ab975292950d3ad0b7b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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