web.hebergement.crihan.fr

- CRIANN -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:23:16:7c:5c:ab:32:02:41:00:01:3a:f0:56:f6:04 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CRIANN

Organization: CRIANN
State / Province: Normandie
Locality: Saint-Etienne du Rouvray
Country: FR

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:23:16:7c:5c:ab:32:02:41:00:01:3a:f0:56:f6:04
Serial Number (int): 9486782426526145561471629738814928388
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:d9:b5:ea:81:b3:ee:4f:9a:71:b5:a8:9e:0a:cf:e4:ed:0e:4f:22
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): e4:12:1f:2c:17:f8:f9:8f:1d:f6:58:90:dc:df:d7:9c:09:50:d2:82
Fingerprint (sha256): 2f:eb:cc:7e:66:eb:a7:c9:56:fe:39:59:08:41:df:e2:b6:b1:69:5d:dd:36:60:7e:5c:85:52:ef:59:96:58:ae

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate web.hebergement.crihan.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.hebergement.crihan.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.hebergement.crihan.fr
valmont.crihan.fr

Other certificates including the domain name crihan.fr

(limited to 100 certificates)
*.crihan.fr
primacen.crihan.fr
web.hebergement.crihan.fr
web.hebergement.crihan.fr
master-imacell.crihan.fr
dirac.crihan.fr
rackcata.crihan.fr
*.crihan.fr
primacen-test.crihan.fr
*.crihan.fr
master-imacell.crihan.fr
web.hebergement.crihan.fr
primacen.crihan.fr
primacen.crihan.fr
rackcata.crihan.fr
primacen-test.crihan.fr
cesar-rouen.crihan.fr
cata-disk.crihan.fr
dirac.crihan.fr
remote-calcul.crihan.fr
craies.crihan.fr
primacen-test.crihan.fr
web.hebergement.crihan.fr
primacen.crihan.fr
primacen-test.crihan.fr
primacen.crihan.fr
web.hebergement.crihan.fr
dirac.crihan.fr
*.crihan.fr
craies.crihan.fr
dirac.crihan.fr
craies.crihan.fr
*.crihan.fr
*.crihan.fr
primacen.crihan.fr
gecat.crihan.fr
idataplex.crihan.fr
gecat.crihan.fr
*.crihan.fr
gecat.crihan.fr
*.crihan.fr
idataplex.crihan.fr
gecat.crihan.fr
option-service.crihan.fr
primacen.crihan.fr
cesar-rouen.crihan.fr
gecat.crihan.fr
web.hebergement.crihan.fr
*.crihan.fr
primacen-test.crihan.fr
*.crihan.fr
gecat.crihan.fr
videosenligne.crihan.fr
web.hebergement.crihan.fr
cesar-rouen.crihan.fr
web.hebergement.crihan.fr
www.crihan.fr
*.crihan.fr
craies.crihan.fr
*.crihan.fr
primacen-test.crihan.fr
craies.crihan.fr
web.hebergement.crihan.fr
primacen-test.crihan.fr
*.crihan.fr
craies.crihan.fr
web.hebergement.crihan.fr
videosenligne.crihan.fr
primacen-test.crihan.fr
videosenligne.crihan.fr
videosenligne.crihan.fr
web.hebergement.crihan.fr
primacen-test.crihan.fr
primacen-test.crihan.fr
primacen-test.crihan.fr
primacen-test.crihan.fr
primacen.crihan.fr
videosenligne.crihan.fr
cata-disk.crihan.fr
*.crihan.fr
primacen-test.crihan.fr
videosenligne.crihan.fr
*.crihan.fr
primacen-test.crihan.fr
cesar-rouen.crihan.fr
gecat.crihan.fr
option-service.crihan.fr
web.hebergement.crihan.fr
cesar-rouen.crihan.fr
master-imacell.crihan.fr
*.crihan.fr
master-imacell.crihan.fr
craies.crihan.fr
cesar-rouen.crihan.fr
cesar-rouen.crihan.fr
craies.crihan.fr
primacen-test.crihan.fr
idataplex.crihan.fr
videosenligne.crihan.fr

Certificate

The complete raw certificate details for web.hebergement.crihan.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFgLHm91Dc8UxX/pk26n
rZTz17G1ZPXu1axoym17vQuq1d99PAovpR6fkTU/2v+qR5FmRQAIxAXnQzVSc8xz
LHyIDsLlIP4zHze3RLYKetehShV1ANmFYfCXyYg/64RenMiBffxz81Q6azKtmCzJ
ELjJAR7rc0EKqypyacd53HNym3Pd1wqek7zNFmhF1/Bm2uerBMEgYuGnFvt07sMu
7ePIfsU3Lr9st6uVfOVodNuS0L2G5O4ypDZ4YLdDZQ0kXWHJYZ6ZblSqC7TN1rD1
ng/2zQZjIiqbh2qVmWlcR/UTQ5EQ5wMqQL0iFBdb5IBPgBPzOqGbDTVHMALzxMa4
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9486782426526145561471629738814928388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Normandie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Etienne du Rouvray'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CRIANN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.hebergement.crihan.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22261357509046385344073416522907963111022976155593660721944825236697032709044389553248433771257840798345067114813836713694148374329735896632462066735605115067602723675389204720385852113026742825050232648706431566866540932918849683690791341202868246426360305886504973971701983311783030063265976961377328179645409121910859775701362745010988026358846626217007680910890091771449248816674032523344294314050567497313166463352672655553033636727017753212650867544592010723774519034370671341455313498874092390608082626136493163162513787868359785904603408649002435548259241028045325747272828244414180809070271330168817469274311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52d9b5ea81b3ee4f9a71b5a89e0acfe4ed0e4f22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.hebergement.crihan.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valmont.crihan.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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