ovidentia.ac-reims.fr

- Ministere Education Nationale (MENESR) -

Issued by AC Infrastructures

About this certificate

This digital certificate with serial number d9:fc:5a:93:6f:9f:3d:54:d2:eb:9e:d0:35:8b:fa:ea was issued on by Ministere education nationale (MENESR).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministere Education Nationale (MENESR)

Organization: Ministere Education Nationale (MENESR)
Organization unit: 110 043 015
Organization unit: ac-reims
Country: FR

Ministere education nationale (MENESR)

Organization: Ministere education nationale (MENESR)
Organization unit: 110 043 015
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): d9:fc:5a:93:6f:9f:3d:54:d2:eb:9e:d0:35:8b:fa:ea
Serial Number (int): 289752770991627084154280000551144651498
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 41:55:54:4f:5f:47:45:4e:45:52:41:54:45
AuthorityKeyId: be:38:22:7f:72:46:a9:d6:84:15:9f:d5:c8:28:7f:5c:b3:02:20:cb

Fingerprint (sha1): c5:24:7b:7a:b6:ac:02:6c:1b:4f:85:8a:12:08:78:b8:01:ff:b1:53
Fingerprint (sha256): 23:84:f9:a3:73:fc:ae:83:ca:e2:e7:4a:8b:94:54:d6:1d:36:3c:73:ac:de:bc:5b:6b:71:c2:60:64:9a:aa:f7

Issuing Certificate URL: http://www.igc.education.fr/Infrastructures.crt

Revocation information

CRL Distribution Point: http://crl1.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl2.igc.education.fr/Infrastructures.crl
CRL Distribution Point: http://crl3.igc.education.fr/Infrastructures.crl

Check the revocation status for certificate ovidentia.ac-reims.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ovidentia.ac-reims.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name ac-reims.fr

(limited to 100 certificates)
ent.clg-arcis.ac-reims.fr
recette-jalladdin.ac-reims.fr
webcours.clg-grandpre.ac-reims.fr
ent.lp-argonne.ac-reims.fr
ent.clg-langevin.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
apache-extranet-t.ac-reims.fr
webcours.clg-pont-ste-marie.ac-reims.fr
partage.ac-reims.fr
web2.ac-reims.fr
php71-dev.in.ac-reims.fr
lyc-oehmichen.ac-reims.fr
php72-dev.in.ac-reims.fr
sympatic.ac-reims.fr
sepia.ac-reims.fr
ent.clg-signy-petit.ac-reims.fr
note.lyc-givet.ac-reims.fr
webmail.ac-reims.fr
webcours.clg-aix-en-othe.ac-reims.fr
ent.clg-george-sand.ac-reims.fr
webcours.clg-george-sand.ac-reims.fr
demo-envole.ac-reims.fr
lp-diderot.ac-reims.fr
webcours.clg-le-noyer-marchand.ac-reims.fr
sepia2.ac-reims.fr
sepia2.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-bouilly.ac-reims.fr
wheb.ac-reims.fr
hesia.ac-reims.fr
atlantique.ac-reims.fr
wordpress1.ac-reims.fr
ent.clg-delafontaine.ac-reims.fr
ent.clg-nouvion.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
sympatic.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
note.lyc-la-fontaine-du-ve.ac-reims.fr
ovidentia.ac-reims.fr
webmail.ac-reims.fr
ent.clg-vouziers.ac-reims.fr
formation-envole.ac-reims.fr
ent.clg-juniville.ac-reims.fr
smtps.ac-reims.fr
webcours.clg-portier.ac-reims.fr
apache-extranet-t.ac-reims.fr
ent.clg-mace.ac-reims.fr
web2.ac-reims.fr
webcours.clg-chaource.ac-reims.fr
lp-gabriel-voisin.ac-reims.fr
dialog.ac-reims.fr
ent.ac-reims.fr
webcours.clg-lusigny.ac-reims.fr
atlantique.ac-reims.fr
ent.lyc-edouard-herriot.ac-reims.fr
webclasseur.ac-reims.fr
ocean.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
smtps.ac-reims.fr
ent.clg-belgrand.ac-reims.fr
ent.clg-bogny.ac-reims.fr
ent.clg-mery.ac-reims.fr
spirale.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lp-simone-veil.ac-reims.fr
clg-bastie.ac-reims.fr
webcours.clg-vireux-wallerand.ac-reims.fr
extranet.ac-reims.fr
webclasseur.ac-reims.fr
ent.clg-vendeuvre.ac-reims.fr
sepia.ac-reims.fr
ent.clg-camus-lachapelle.ac-reims.fr
lyc-edouard-herriot.ac-reims.fr
piatest.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
wheb.ac-reims.fr
ent.clg-rimbaud.ac-reims.fr
ent.clg-fumay.ac-reims.fr
xxi.ac-reims.fr
lp-diderot.ac-reims.fr
spirale.ac-reims.fr
sitetab3.ac-reims.fr
iwc.ac-reims.fr
bv.ac-reims.fr
ent.clg-juniville.ac-reims.fr
lyc-chagall.ac-reims.fr
ent.clg-raucourt.ac-reims.fr
tage.ac-reims.fr
syndicat.ac-reims.fr
hub-envole.ac-reims.fr
webcours3.ac-reims.fr
iwc.ac-reims.fr
ovidentia.ac-reims.fr
ent.clg-beurnonville.ac-reims.fr
lp-simone-veil.ac-reims.fr
ent.clg-vrigne.ac-reims.fr
ent-tournebonneau.ac-reims.fr
ovidentia.ac-reims.fr
ocs-ext.ac-reims.fr
ent.clg-mery.ac-reims.fr

Certificate

The complete raw certificate details for ovidentia.ac-reims.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4eRSfWb5/0QmjF+3JhB
iZ5NN3wyESQybCaD912myB3X60VibdUZYGxosiveeCDcegyRLilQ+f370xsHUaAM
5QLnG5THMIEO45nf6zoMI7NC/B3YDk2cCgSzXeCXtuDboQ0yr1FyA50vi2VHU//s
S6mXmPGPW2/STsNOlqgC/YMel0wW0r9QfrddC+UokWhMGh+SKQW4GFEcIayQjZ5x
0Mus8HjyPIKz/m7Ar0+VfDq9CC6bHHdEcwpqBteYGbcOf/KRvXTKth3ISCUdoFeg
1ZDPFdALYQwgQIKNMk2cIMKX3TmssUiZBQiV9Tetm6vBzvCY639Y+x6eHVmHb14C
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289752770991627084154280000551144651498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere education nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AC Infrastructures'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-18 10:51:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-18 10:51:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ministere Education Nationale (MENESR)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '110 043 015'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac-reims'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovidentia.ac-reims.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24683320311347000073807355563173810432407233414706619762752131599716176016254738947019021774762743674947717098406775224434875240854592666989331740993832669647812669141879965406043950397717681624038413522815198401657264739215905434383206340842173587498354694439634209238657206107409712238280024518660636937281264317408971758392585060165415421702648089553885526413930834839512737486822060485030572450630483984721999685986644130445199406762353685011790545422905597275655747892776215797703359187412160168840667758303726806374411171056349154409240637984975378882085598217112900763074125676286392897956753140649926114279981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.igc.education.fr/Infrastructures.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be38227f7246a9d684159fd5c8287f5cb30220cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.20326.69.1.1.4.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl1.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.igc.education.fr/Infrastructures.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
							4155544f5f47454e4552415445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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