econf.sgib.com

- Societe Generale -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 4f:d6:d4:ca:b8:ad:90:36:18:98:71:57:c2:48:a5:9e was issued on by GeoTrust Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Societe Generale

Organization: Societe Generale
Organization unit: SGCIB
State / Province: Paris
Locality: Paris
Country: FR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:d6:d4:ca:b8:ad:90:36:18:98:71:57:c2:48:a5:9e
Serial Number (int): 106124479126814676100023182466667292062
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 76:ef:ef:25:9b:d0:9b:8d:73:78:11:ef:ab:f7:2a:41:9f:fd:1a:a3
Fingerprint (sha256): 2b:7d:31:27:69:6b:74:09:c9:d0:67:0e:6d:b4:58:ec:eb:50:b2:d6:ad:20:89:ad:11:a4:7b:59:16:16:74:17

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate econf.sgib.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for econf.sgib.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.econf.sgib.com
econf.sgcib.com
www.econf.sgcib.com
econf-demo.sgib.com
www.econf-demo.sgib.com
econf-demo.sgcib.com
www.econf-demo.sgcib.com
ebilling.sgcib.com
www.ebilling.sgcib.com
ebilling-demo.sgcib.com
www.ebilling-demo.sgcib.com
www.econfinfo.socgen.com
www.econf.socgen.com
www.econf-demo.socgen.com
www.econfinfo-demo.socgen.com
www.econf-homol.socgen.com
www.econfinfo-homol.socgen.com
www.ebillinginfo.socgen.com
www.ebilling.socgen.com
www.ebilling-demo.socgen.com
www.ebillinginfo-demo.socgen.com
www.ebillinginfo-homol.socgen.com
www.ebilling-homol.socgen.com
econf.sgib.com

Other certificates including the domain name sgib.com

(limited to 100 certificates)
confirmation.sgmarkets.com
econf.sgib.com
econf.sgcib.com
confirmation.sgmarkets.com
confirmation.sgmarkets.com
confirmation.sgmarkets.com
econf.sgcib.com
ebilling.sgcib.com
confirmation.sgmarkets.com
confirmation.sgmarkets.com
confirmation.sgmarkets.com
econf.sgcib.com
econf.sgcib.com
confirmation.sgmarkets.com
econf.sgcib.com
econf.sgcib.com
econf.sgcib.com
econf.sgib.com
econf.sgib.com
confirmation.sgmarkets.com
econf.sgcib.com

Certificate

The complete raw certificate details for econf.sgib.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dTFlnf6TPsnrGSIvydw
NGMDJ6QiiUEJTOU2Jz8IjU5nrCiDi0myzx6Gs3XVBVK2D/y7A9rFXvcFpg1jOWoq
HYx1xlxi2TmFJ+a3GSNHe5TLsyBXqZyySnU9IpH/49vXFUzB+aJUcn2qwDkn8N5n
vw+45bd4iJ1EbnWz+SCobfbEIr/9JEPs+2h3YhTUCYNW7t0hfVg2SIqyrr/sruBu
fs18aObJzAZAR1GDCxPJQnWKrZUfN7lc442+bA/MyNZe4XTC1PctB4NeVJbTXPjA
FKUdWiGHjBFp4I/xP3+FgQxOTI/AybedJy34i77HtSW1z4CE3Nb/pnMU3anWdLZp
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106124479126814676100023182466667292062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SGCIB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'econf.sgib.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26993680656257721337781621291148059824606370219375838058588037724776605581869795724630665385983109197779469789651276653317118309025145305549999572141594201823408365568711303926991295973051372426249756383553918149639250902908852501925178494655618632735403083321862224064531964810233794308586236359922436013144774180786900745892233252117818814502468481066420602915757963103982057695055928463442115860815616075845264463304951584102097622533185507494752822129072785717871989139710874013611664318966591542986145935951774895678277816850857612096649912580005360738078866624693349891415767435853063399497981508153525971347737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf.sgib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econf.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econf-demo.sgib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf-demo.sgib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econf-demo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf-demo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebilling.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebilling.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebilling-demo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebilling-demo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econfinfo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf-demo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econfinfo-demo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econf-homol.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.econfinfo-homol.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebillinginfo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebilling.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebilling-demo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebillinginfo-demo.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebillinginfo-homol.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebilling-homol.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'econf.sgib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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