mariefrance.fr

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 89:95:73:67:c6:8b:cb:d8:0e:04:91:76:25:bf:66:0e was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mariefrance.fr

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 89:95:73:67:c6:8b:cb:d8:0e:04:91:76:25:bf:66:0e
Serial Number (int): 182880228353507358075253728955481417230
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 56:b1:86:cd:a2:37:64:2f:43:b3:3b:93:37:b8:26:39:ce:84:17:fc
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 35:36:60:ad:19:be:d7:b8:58:28:69:b1:45:80:c9:a6:00:1d:fc:95
Fingerprint (sha256): 2c:b8:c7:7d:ff:24:30:3b:52:ea:0e:b6:b0:f4:50:67:8a:75:9c:d2:02:c5:fd:21:b4:e9:be:e1:56:8e:78:03

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/dbH46jz9DPw
CRL Distribution Point: http://crls.pki.goog/gts1p5/guSKsunZUzc.crl

Check the revocation status for certificate mariefrance.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mariefrance.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mariefrance.fr
*.mariefrance.fr

Other certificates including the domain name mariefrance.fr

(limited to 100 certificates)
abonnement.groupemarieclaire.com
livreblanc.mariefrance.fr
livreblanc.mariefrance.fr
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
sni172098.cloudflaressl.com
sni221250.cloudflaressl.com
ssl374745.cloudflaressl.com
sni221250.cloudflaressl.com
ssl392171.cloudflaressl.com
ssl374746.cloudflaressl.com
sni172098.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276959.cloudflaressl.com
ssl389436.cloudflaressl.com
sni.cloudflaressl.com
nla.mariefrance.fr
nla.mariefrance.fr
sni87554.cloudflaressl.com
ssl6538.cloudflare.com
p19.base-deal.eu
nla.gala-news.fr
sni221250.cloudflaressl.com
p19.deal-envoi.com
ssl6538.cloudflare.com
sni221250.cloudflaressl.com
ssl374745.cloudflaressl.com
sni238301.cloudflaressl.com
ssl392170.cloudflaressl.com
ssl392171.cloudflaressl.com
ssl276958.cloudflaressl.com
ssl392170.cloudflaressl.com
nla.mariefrance.fr
sni238301.cloudflaressl.com
com.mariefrance.fr
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
sni.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
p19.fichier-mailody.fr
ssl392169.cloudflaressl.com
mariefrance.fr
ssl276960.cloudflaressl.com
ssl390166.cloudflaressl.com
ssl276960.cloudflaressl.com
ssl392171.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276960.cloudflaressl.com
em.auto-moto.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276958.cloudflaressl.com
squad.leservicedesastuces.fr
nla.mariefrance.fr
ssl374744.cloudflaressl.com
ssl392169.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
mariefrance.fr
ssl6538.cloudflare.com
qualifio.mariefrance.fr
sni221250.cloudflaressl.com
sni238301.cloudflaressl.com
ssl276958.cloudflaressl.com
sni221250.cloudflaressl.com
ssl392170.cloudflaressl.com
em.auto-moto.com
ssl374746.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
livreblanc.mariefrance.fr
sni172098.cloudflaressl.com
sni.cloudflaressl.com
ssl392171.cloudflaressl.com
sni221250.cloudflaressl.com
sni221250.cloudflaressl.com
ssl276960.cloudflaressl.com
sni221250.cloudflaressl.com
sni172098.cloudflaressl.com
ssl276960.cloudflaressl.com
ssl6538.cloudflare.com
ssl6538.cloudflare.com
sni221250.cloudflaressl.com

Certificate

The complete raw certificate details for mariefrance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu51DCTFYmscjEqt2N8V
kEqJMvTK73l7WOAYRSRo7CjYmvrlKwZ9XtlMLSDUp3mHyudceorUuIzIHMuT6Nwh
Rz2f8TpVi1OCuKtW7sJYYjgZI2l2pgY+JqQu+wSGaC8RKHz8G8ne0tJycJ+lZHgz
VpZEMkar2NBQzZhbymzA4Afg3yBy+TpwQ3V7jI+9MjcoAKDZ5a/ra+2J3vzT4a9c
9MOHOoUvV3RpAtXK0OlCePigZLO2+IPgl6cvtC+Uir6/ZsVAfddKkaYG2s1mUY6G
OzO5xI2tHKP2bcvTVUjJUGdy4AQfxHdN5FzwEoSmCVJfj2/8g49LlQDdxWK1pRMV
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182880228353507358075253728955481417230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 03:52:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 03:52:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mariefrance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19558286600803660814572601891197628259143613971462742651754319016212875207653233012365748303835182226586241531154131305311770490970181742744084684556662024001055328964389928010299350157655534284705096923596525992693434070784318200814104556767291924045628173555073388635135749842118641492198420378034522962573585144863246326935159380576708408148325544661875283759274682203531828889286809688638350628366848728947716984679416764480209311456895730187831553447398941108871794660254114880594018384978496319333860863860637127875127764288141676908780694046430051640867397916751967782116642435028171896604067915641089013519721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b186cda237642f43b33b9337b82639ce8417fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/dbH46jz9DPw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariefrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mariefrance.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/guSKsunZUzc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f568c1278000004030047304502210093ad371b67c2b4937b72a7eeba06e96bf31580378090bb288bf5936e1adfe668022015425fdfc53682b6a9d02c6cfeec3c118a302be2ff4d10a588f73ff359fcda14007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f568c12650000040300463044022005ae454e45f85f2fab1086efaed0953eddfc8e81e8f79327d59e821eb71ec43f02202ae4828d3e41b283ecde70824abda6235dc7d2264ec0947057c5c8446a52ba8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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