*.ccmp.eu

- Experian France -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:02:82:e2:39:1d:aa:5d:15:d7:39:f5:96:82:ba:b6:c6 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • RawSubject attr oid 2.5.4.3 encoded PrintableString contained illegal characters PrintableString type's alphabet only includes a-z, A-Z, 0-9, and 11 special characters (RFC 5280: Appendix B. ASN.1 Notes)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Experian France

Organization: Experian France
State / Province: Ile de France
Locality: Courbevoie
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:02:82:e2:39:1d:aa:5d:15:d7:39:f5:96:82:ba:b6:c6
Serial Number (int): 1492141516991248098357082879945054000690886
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ea:d5:5f:40:e7:d5:ab:5f:1a:64:40:6c:94:ee:d7:b3:66:9c:0a:28
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 43:21:2b:27:3f:8a:b6:92:68:d8:8c:4b:de:93:9a:85:07:c8:6d:9e
Fingerprint (sha256): 2e:62:de:9a:41:b5:a9:b6:7a:83:6f:b0:70:e3:d2:b6:be:23:f9:f6:21:b1:85:5d:ab:4e:7d:60:5b:69:44:b2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate *.ccmp.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ccmp.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ccmp.eu
ccmp.eu

Other certificates including the domain name ccmp.eu

(limited to 100 certificates)
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
ats.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
rts.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
r.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
sts.ccmp.eu
*.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
login.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
datascience1.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm.ccmp.eu
wpm.ccmp.eu
*.ccmp.eu
returnpath.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu

Certificate

The complete raw certificate details for *.ccmp.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx08jo1F2OZBQFjuKXB6v
VH/X25fLvofKn6X/ZWMOZJMKgcSLbinFNJ4cTzkHHP+UFhqFBMdTS0A2l35Unret
nVUcpiHLZY1H4J/5VoecLXYgJFCnny+a5QvsbspGJUvRlKYhrLfCsvvpJezw5jVX
bM/SdZjiT1FtLGc/ryxh+EB/oaXT1vwrIZUUGQVil5BgxGAG6tAwBOryGlDRTe4v
gtqdBeRYjiIXLjoGP5edPjlUPpZCskW/xQCoc+dJF2rsJg6V5fdbIzKbU18YND7J
DINDqC/Xx4ffx+LhfMFqje2eOx42kRmR9tjPsiVl7s8WC3jZxY0Y00gfJTHFUxZr
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492141516991248098357082879945054000690886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-18 10:31:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-19 10:31:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '*.ccmp.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25160447687566930916736690870363332902880249937950062204480817185572485001306176695783006929536892053291079535674453731378119044128798040647250815017020801244459579337021529891606845040549532543241094910634547546261474958225173325319425826630157251259300455497981310708390366749879470636992960194704433820272365087834545085927252926926447954675390778086978463570657486940736678134650068549690082040367751742759722210514240656197780784756052604648250044933979235247801077006129264470023750920830848794316376013243128064734371749368110346510599808596593123193029229261910403122750445242112496349076053748822529772251907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccmp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmp.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ead55f40e7d5ab5f1a64406c94eed7b3669c0a28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b13a77fd52086c66da46adf4a6b4194f910b5cbb8bf564b0d70ea79a8e64a7ac2425ac5399b9525645d77f298e769a6bfc3bfc7434973f28da4717a8563344f3faaaf4d3fd18b17d829ed57014c8b6ca0f2abd3ae0d2ca354209a2b4e1e24e02b63541497cc3a59aa94b63099c37de9ea314932eb3d87c359658954da5ae9628061e60427005d82f137961607566930083f8230ae26953b25b0da9c5f3201f652a58beb4099701ab2710250c5a63dcb784e353430872b9bbeec2d31c05d45bcaaa4bef4ed9d4753422201971d365c0e1447959e8f47d158fcf9a3b96a2aa704ea17e17dfde8684fe7981d948bd1c0db8703a01403b829514bb247d145af6d9b6