securepayment.yves-rocher.fr

- Laboratoires de biologie vegetale Yves Rocher -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 38:c2:18:1a:aa:e9:f1:b7:1d:02:4e:1a:ba:59:d6:4b was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Laboratoires de biologie vegetale Yves Rocher

Organization: Laboratoires de biologie vegetale Yves Rocher
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Morbihan
Locality: La Gacilly
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:c2:18:1a:aa:e9:f1:b7:1d:02:4e:1a:ba:59:d6:4b
Serial Number (int): 75444562245169031307276790237761230411
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 73:bb:ff:2a:d9:e6:28:32:45:e4:80:62:32:4c:e3:6c:67:24:a2:fe
Fingerprint (sha256): 32:ed:07:01:8b:05:ff:5b:d0:0a:d3:08:86:ea:e9:58:b2:ee:9f:88:17:e1:cd:93:5b:79:c7:f6:95:70:04:c2

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate securepayment.yves-rocher.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securepayment.yves-rocher.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securepayment.yves-rocher.fr

Other certificates including the domain name yves-rocher.fr

(limited to 100 certificates)
t.newsletters.yves-rocher.fr
www.ambassadeur.yves-rocher.fr
datayr.yves-rocher.fr
images.yves-rocher.fr
macif-ecartecadeau.yves-rocher.fr
www.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
securepayment.yves-rocher.fr
image.care-chemicals.basf.com
t.newsletters.yves-rocher.fr
www.franchise.yves-rocher.fr
newsletter.yves-rocher.fr
franchise.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
k.yves-rocher.fr
securepayment.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
ambassadeur.yves-rocher.fr
images.yves-rocher.fr
survey.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
secureorder.yves-rocher.fr
survey.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
newsletter.yves-rocher.fr
search.yves-rocher.fr
ambassadeur.yves-rocher.fr
securepayment.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
www.yves-rocher.com
image.care-chemicals.basf.com
t.nl.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
t.nl.yves-rocher.de
secure.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.fr
www.franchise.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
image.care-chemicals.basf.com
e-cartecadeau.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
coordo-campagnes.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
recrutement.yves-rocher.fr
franchise.yves-rocher.fr
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
secureorder.yves-rocher.fr
*.crm.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
www.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
securepayment.yves-rocher.fr
secureorder.m.yves-rocher.fr
image.care-chemicals.basf.com
image.care-chemicals.basf.com
newsletter.yves-rocher.fr
datayr.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
vpc.yves-rocher.fr
k.yves-rocher.fr
datayr.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
t.nl.yves-rocher.de
securepayment.yves-rocher.fr
images.yves-rocher.fr
secureorder.yves-rocher.fr
image.care-chemicals.basf.com
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
nocdn-w.yves-rocher.fr
preprod.e-cartecadeau.yves-rocher.fr

Certificate

The complete raw certificate details for securepayment.yves-rocher.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfkFMEsLJQsn8XFBW7gv
9yuNGPof9thbSOd4FgJK3sn/OyztNQfHQfciKeupTU9TfWD50M5OZOCe+blMvI/X
ztyxX1/B1i8VFsUCjf4fnNzNXflEMMl8drQtyUZuIcrqEV40yqfas76OLgtGpSTZ
8HqNL8EcWSQCyijLZYNtukPp2nL4I9uZOSTIBs+7p83jqoR3xlTdPhwiPl7QYqJP
dAqlUTSC1+lYYTewSknd8+w77vG5S82n+o9n6ObsRIEzufDzRUfQABXoGAoJ7xMt
8U6Dquu6WlvrIOTlK1NFXbV2myhUVLxrEHTQL9DD6WvYABHU7UvFsZVTgbj9AexJ
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75444562245169031307276790237761230411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Laboratoires de biologie vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'securepayment.yves-rocher.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23981836109494436059401544660469781660735526679680083245587455584314107813025328115035232088459868934170527512466469079532782482746984085003101281635188316196095722329841199043678225506444570223771776769724583897934395360850302081695028141015449126171912067092384318162277942143713745446466522200241922194259606525824735003661793592473640408056727113571892759858001619950314163374023322029111992645367223736168053207959895746013403828798946579974571975281153028831261995291922104464665904609059003201630634734721048034478181786326948781906876328728463376164239362251102968368187957949231149451877316902551193452824953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepayment.yves-rocher.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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