deploik.sid.erdfdistribution.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:27:15:cc:17:ab:98:75:1a:9f:49:36:d3:b1:74:cd:89:de was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:27:15:cc:17:ab:98:75:1a:9f:49:36:d3:b1:74:cd:89:de
Serial Number (int): 1494208846646402037371306298742856894745054
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: f0:95:9f:43:ce:e5:1c:1f:df:65:65:72:46:1a:dd:e9:56:09:d1:93
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 8a:a6:1f:4e:02:08:5d:3a:cf:c9:e7:50:b7:b2:c1:48:6a:80:54:f2
Fingerprint (sha256): 24:53:8d:d1:46:39:d2:48:0c:9b:26:84:55:e0:45:e2:11:ae:92:a5:10:f4:87:55:d1:8a:e0:61:9b:d1:88:80


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate deploik.sid.erdfdistribution.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deploik.sid.erdfdistribution.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deploik.sid.erdfdistribution.fr

Other certificates including the domain name erdfdistribution.fr

(limited to 100 certificates)
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
colloc2.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
ccd.erdfdistribution.fr
portail-osr-prestataires.enedis.fr
enedis.fr
brandcenter.enedis.fr
relevermoncompteur.erdfdistribution.fr
deploik.sid.erdfdistribution.fr
colloc.erdfdistribution.fr
perm.erdfdistribution.fr
perm.erdfdistribution.fr
enedis.fr
noedmzplywfe001.intranet.edf.com
enedis.fr
pilotin-dev.erdfdistribution.fr
herakles.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
fournisseursderdf.erdfdistribution.fr
distri-pictrel.edf.fr
colloc.erdfdistribution.fr
perm.enedis.fr
relevermoncompteur.erdfdistribution.fr
prac-pre-prod-internet.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
etoile-rh.edf.fr
portail-osr-prestataires.erdfdistribution.fr
brandcenter.enedis.fr
perm.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
connect-racco.erdfdistribution.fr
ccdsecours.erdfdistribution.fr
perm.erdfdistribution.fr
srk.pprd.sid.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
pcydmzplywfe001.intranet.edf.com
distri-pictrel.edf.fr
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
herakles.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc-perf.erdfdistribution.fr
ccd.erdfdistribution.fr
herakles.erdfdistribution.fr
brandcenter.enedis.fr
ccdsecours.erdfdistribution.fr
PCYINTPLYPFE001.neoprod.edf.fr
brandcenter.enedis.fr
relevermoncompteur.enedis.fr
pcydmzplywfe001.intranet.edf.com
perm.erdfdistribution.fr
perm.erdfdistribution.fr
connect-racco.enedis.fr
portail-osr-prestataires.erdfdistribution.fr
mediabox.erdfdistribution.fr
herakles-pp.erdfdistribution.fr
brandcenter.enedis.fr
pcydmzplywfe002.intranet.edf.com
relevermoncompteur.erdfdistribution.fr
brandcenter.enedis.fr
portail-osr-prestataires.enedis.fr
cko-osb-recf.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
enedis.fr
connect-racco.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
colloc.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
noedmzplywdi001.intranet.edf.com
noedmzplywfe001.intranet.edf.com
www.erdfdistribution.fr
noedmzplywfe002.intranet.edf.com
etoile-rh.edf.fr
deploic.sid.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
connect-racco.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
pcydmzplywfe001.intranet.edf.com
rh-planete-formation.edf.fr
herakles.erdfdistribution.fr

Certificate

The complete raw certificate details for deploik.sid.erdfdistribution.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIePpNWWovpmctPAIz3R
Xe1f4hEvD0zXQuVLPg8ev+UJWqaJWBKIq7swmDSmjUIqvA5bLKAF1bdYG1eSk641
kuwNiiOZM7lMHqktnfBjfgjPN+/Gj+FC+BRMQ+2XFxJ4GPipm3viBKcnTSNODBJV
qizUbaEf0tgs+QAkWDJw3i07YQohuvQ4ta9Xj04cpBWYW/jxByMhFRQktQ2av/Qn
xHYaD5gPPs6igbfw+pDEtQP78V4hk+YgiMg3HUFIQkD4F7kGGwcK9dut4XFyiSkn
kKvFGszSF3oYprP4cQ4c/zZBtUamD2Yqm9m2lpk2Fl2bE5TeflhHzM9ccH5GQq7V
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494208846646402037371306298742856894745054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-03 15:02:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-04 15:02:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deploik.sid.erdfdistribution.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24304602227739764890429181315049462530140478960850250998245983564742032068119181968410606468927358279573273872218319377959021590914758839555296866690890753889870408627867543037901004484220465315304572158353826588115404767465022922622867491826981806396894442632001354982830178754048296574326985563136084812104180924528976647129266351210835847821627955086337315088880363479969293267965442332523980936895169643200160788905201453647116021172897139469924869175337505095976990045738731696917297784883699832549918253275734848081629818426928916489517364764785719443605774445617768249965785024250152461462867056436176978105609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deploik.sid.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0959f43cee51c1fdf656572461adde95609d193
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0070f72f857b3a2d240e686ca76d70974b449ed282dc093f8ec17897d3ae1475ff16bf0b0730d2d7c9ed9d9735ad7a3bc8f8a97539283199f8cb2a90b8bf41efe017be2f63de7db562c2138f37dd8bfb41fa06887da31eaab63d1001944a9cca072d1d8c91edba2efaee8af1cef28c4cf45f0adda75b0f7813a67242c6f4c016d9591980cbedb67ad25a83ef0c7f3caafc2917f2959ef264efd4e66d1abfd4fa246fc6fa18375876d9ec4f511a8d5fe9cb5ad9d644720a06f5d17c3fb7eb4ae94cef4435978e697c36c2ceacc4bde7d945bc9a4903b5933d03bedfbfd9eda21b5a468f42ede38ffe6377be30fb98000cde2fb9fe5db37e43be0135aef0b45b84e1