adherent.mnh.fr

- MUTUELLE NAT HOSPIT PROF SANTE SOCIAL -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:57:74:de:df:12:03:db:8e:68:c9:03:c5:6a:f0:8a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MUTUELLE NAT HOSPIT PROF SANTE SOCIAL

Organization: MUTUELLE NAT HOSPIT PROF SANTE SOCIAL
Locality: AMILLY
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:57:74:de:df:12:03:db:8e:68:c9:03:c5:6a:f0:8a
Serial Number (int): 17734064189099474183994855783288991882
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a7:3d:01:75:2d:f3:3a:3f:70:2c:74:7e:cb:3a:2b:5d:eb:d8:96:d8
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 25:ff:2d:1b:c1:9e:1e:86:cb:a7:d9:31:54:d1:21:fc:b8:3e:42:d0
Fingerprint (sha256): 31:83:b5:56:a3:47:6e:cd:5c:c7:c7:25:1c:01:63:4a:e3:19:84:e6:be:83:5e:de:61:75:a3:7b:ed:e9:cc:bf

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate adherent.mnh.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adherent.mnh.fr

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adherent.mnh.fr

Other certificates including the domain name mnh.fr

(limited to 100 certificates)
imperva.com
adhesion.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
incapsula.com
imperva.com
imperva.com
akamai-san109.exacttarget.com
www.mnh.fr
incapsula.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
www.mnh.fr
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
*.mnh.fr
www.mnh.fr
incapsula.com
incapsula.com
imperva.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
adherent.mnh.fr
*.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
secgate.mnh.fr
www.mnh.fr
www.mnh.fr
incapsula.com
ppradherent.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
ppradherent.mnh.fr
secgate.mnh.fr
incapsula.com
incapsula.com
incapsula.com
secgate.mnh.fr
incapsula.com
incapsula.com
adherent.mnh.fr
adherent.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
ppradherent.mnh.fr
incapsula.com
secgate.mnh.fr
sts.mnh.fr
*.mnh.fr
sts.mnh.fr
adherent.mnh.fr
sts.mnh.fr
imperva.com
incapsula.com
incapsula.com
incapsula.com
concours-mnh-bfm.mnh.fr
adherent.mnh.fr
incapsula.com
incapsula.com
incapsula.com
*.mnh.fr
incapsula.com
sts.mnh.fr
incapsula.com
imperva.com
sts.mnh.fr
ppradherent.mnh.fr
*.mnh.fr
sts.mnh.fr
akamai-san109.exacttarget.com
imperva.com
*.mnh.fr
certificat-mutualiste.mnh.fr
incapsula.com
akamai-san109.exacttarget.com
sts.mnh.fr
incapsula.com
secgate.mnh.fr
incapsula.com
www.mnh.fr
incapsula.com
sts.mnh.fr

Certificate

The complete raw certificate details for adherent.mnh.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17734064189099474183994855783288991882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMILLY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MUTUELLE NAT HOSPIT PROF SANTE SOCIAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adherent.mnh.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3904470275513145875256244837159033529045229534948021866505101682870513713130082542797938647071404491472620249952779808297390944470913527636492618660468589885141093966874446040204092464438045608116198007039535782746044972281427536057284531195974955552467920840127404492784966803175705126746729110843088266469904427468586038483996283451304742728324177102074857951724321066813685951716935213336064268822185420180365256293730152018050365711576880028068811619102215307488129914556375275040228381573285143705010393915794137993861706338666431833316380126192299140756286803113355940766705466666600470537365599395907751098680378698952074360279682747045594241432502152545210121900893387886986790413188398014500076146606255278087760288760219344300103519431010954019042555866061081837577084949964144534363873828062026088546040551587630640935267306117137056197290470961986536381721040800753296190014992510888637584859900822834474489545441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a73d01752df33a3f702c747ecb3a2b5debd896d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adherent.mnh.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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