catalogue.api.diplomatie.gouv.fr

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number b8:cc:e1:2c:95:c9:07:c6:22:a1:96:ac:82:44:e8:2d was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=catalogue.api.diplomatie.gouv.fr

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): b8:cc:e1:2c:95:c9:07:c6:22:a1:96:ac:82:44:e8:2d
Serial Number (int): 245641746858121894968636066312537565229
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0f:3f:66:1e:cf:04:4b:0a:b3:5d:91:70:de:94:85:01:c9:53:a6:98
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 86:0c:79:47:26:e7:93:80:a2:72:50:f1:a9:3b:96:cc:85:a2:85:6b
Fingerprint (sha256): 2d:35:d9:33:15:cc:c5:45:29:84:93:ca:a0:d8:82:83:2e:d9:ff:52:84:7c:2a:c5:5b:c3:36:36:97:ad:88:e8

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate catalogue.api.diplomatie.gouv.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catalogue.api.diplomatie.gouv.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalogue.api.diplomatie.gouv.fr
www.catalogue.api.diplomatie.gouv.fr

Other certificates including the domain name diplomatie.gouv.fr

(limited to 100 certificates)
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
dev.grandformat.diplomatie.gouv.fr
forge.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
smacano.mad.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
enrolement.portail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
smtp1.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
fecito.mad.rad.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
votefae.diplomatie.gouv.fr
www.diplomatie.gouv.fr
latitudefrance.org
apk.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
cncd.diplomatie.gouv.fr
idppastel.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
api.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
latitudefrance.org
basedoc.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
santiano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
micore.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
cic-lp.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
catalogue.api.diplomatie.gouv.fr
*.reseau21.diplomatie.gouv.fr
bibliotheque-numerique.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
mail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
portail.diplomatie.gouv.fr
micore.dpad.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
stendhal.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr

Certificate

The complete raw certificate details for catalogue.api.diplomatie.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245641746858121894968636066312537565229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalogue.api.diplomatie.gouv.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643330350158077024746155486724113963597362767578885313093576130812112127448781785671945617837655942579991792561289242815999510615258513250299469321378500568022524090719651442889875121606037843539421032668559634661886876627933415671287849703245861716413107551045485030113321449626053679541536366816762887205949504298526163045630397027628125385023049148734647999637317861695722692917821791578345620191608216003885268021329954691559185937837086540571809517530270486911024587645307593297922133692341313464961379801824621807277121221412304689399981591835180892404545566158223116377405506621187881547941140986097887925172423005302748504980448895761457828385260743619580387975563405337754161694388960645642540062536626898873065009001787972257891040143296931972119366150903034222903758549824197134671347425479005445193074178432950836011797992162520772273071742879951599747784343606952508174623120422672975801737467671592032577200681648134928566452468126357298824569499530905501740848315800354972193095653736754988997727939075263099609670658038342765992587821795654324430362456218438128960511328076097868432702315601229861702455753962085393824476778990135695894684044949144322137512577827818914209043246838800990171101185157505962718066232981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f3f661ecf044b0ab35d9170de948501c953a698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue.api.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalogue.api.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000182f35f416200000403004730450220214c61ef120a31a1cfa281c2d5c733a0862c126fc282d0ec1e7802cb6171e58c022100a9d16dd5fb96cc86af7124dfee1047b1215c231d035cb48e3c7ecf243bce6c840076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000182f35f416f0000040300473045022100d8d286dc92a14c0f4e52f91696b621e7fe1ba95b65fb6c45c47d6d1674d562220220274fdddc64377f00463c299ff2bc99fec8562d9c60a476fe142053c536448240007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000182f35f4144000004030046304402205c345718b081601de450e80929d63918e9dd506d07c314719735d4b02e094489022009981dc5911bb9123af287277ba4b0bf6f022f813e6df4772108a7d8fdff559a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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