desk.ame.sgcib.com

- Societe Generale SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:be:77:3a:ec:5d:72:28:69:95:44:e2:1a:fa:34:56 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:be:77:3a:ec:5d:72:28:69:95:44:e2:1a:fa:34:56
Serial Number (int): 8964322652958804377274136516336694358
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 61:a7:39:00:ef:c4:3f:96:24:f4:3c:66:d9:87:ae:f9:48:22:32:a6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a8:fc:37:05:ef:e1:f6:2b:6a:ae:fb:08:e7:42:fb:5f:1d:a9:8c:1d
Fingerprint (sha256): 35:95:74:71:20:79:1f:1c:79:af:20:c3:f4:8f:90:09:17:c6:aa:ab:04:a0:03:40:80:92:7c:0e:15:bb:a2:1d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate desk.ame.sgcib.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desk.ame.sgcib.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desk.ame.sgcib.com

Other certificates including the domain name sgcib.com

(limited to 100 certificates)
desk-dr.ame.sgcib.com
desk-sso-uat.asi.sgcib.com
ws-dir-apac-01.socgen.com
bbk.ebics.de.sgcib.com
desk-dr.ind.sgcib.com
sgmarkets.com
teste-assinar.ame.sgcib.com
sgmarkets.com
fx-streaming.sgcib.com
myhedge-staging.sgmarkets.com
access-apac.im.socgen.com
www.erec.sgcib.com
desk-sso.eur.sgcib.com
sgpulseuat.sgcib.com
desk.ame.sgcib.com
desk.ind.sgcib.com
valuation.sgmarkets.com
www.warrants.com
desk-dr.ame.sgcib.com
desk.ind.sgcib.com
join.socgen.com
parmail.sgcib.com
desk-dr.ind.sgcib.com
ic.sgmarkets.com
www.erec.sgcib.com
desk-uat.asi.sgcib.com
global.societegenerale.com
www.ebics.de.sgcib.com
sgmarkets.com
www.ebics.de.sgcib.com
www.warrants.com
desk.ame.sgcib.com
c-access.asiapac.sgcib.com
access-apac-01.socgen.com
ataccess-uat.socgen.com
ataccess.socgen.com
www.solutions.sgcib.com
desk.asi.sgcib.com
listedstructuredproducts.com
www.ebics.de.sgcib.com
listedstructuredproducts.com
www.warrants.com
alpha.sgcib.com
confirmation.sgmarkets.com
www.solutions.sgcib.com
access.im.sogetest.com
desk.asi.sgcib.com
newpulse.sgcib.com
www.warrants.com
www.ebics.de.sgcib.com
events.sgcib.com
desk-dr.asi.sgcib.com
altura.sgcib.com
Ws-dir-apac-01.socgen.com
events.sgcib.com
desk-dr.eur.sgcib.com
access.im.socgen.com
www.warrants.com
access-emea-01.socgen.com
pulse.sgcib.com
homo.webadmin.societegenerale.com
ataccess-uat.socgen.com
ef-market-intelligence.sgcib.com
desk.sgcib.com
www.warrants.com
valuation.sgmarkets.com
mail.iap.socgen.com
ic.sgmarkets.com
desk-dr.asi.sgcib.com
www.privatebanking.societegenerale.com
desk-sso.asi.sgcib.com
desk-dr.ind.sgcib.com
bbk.ebics.de.sgcib.com
solutions.sgcib.com
www.privatebanking.societegenerale.com
desk.eur.sgcib.com
assinar.ame.sgcib.com
econf.sgib.com
www.sgcib.com
shield.sgcib.com
www.warrants.com
www.warrants.com
desk.ind.sgcib.com
global.societegenerale.com
join.socgen.com
sgmarkets.com
assinar.ame.sgcib.com
societegenerale.se
valuation.sgmarkets.com
www.ebics.de.sgcib.com
econf.sgcib.com
solutions.sgcib.com
desk.ame.sgcib.com
desk-sso.eur.sgcib.com
desk-uat.eur.sgcib.com
solutions.sgcib.com
join.im.sogetest.com
pulseuat.sgcib.com
global.societegenerale.com
confirmation.sgmarkets.com

Certificate

The complete raw certificate details for desk.ame.sgcib.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHPowkjyUER8LLZOt9tf
UCjqjggSR85lRXRn/E7kryt3r0CyyGZbXQu4feHo4PQay9ubUzLpqOvZo4JJJLC3
SAVv+AK5QpKsTIbmfm+zJ4QgM/YNBVCbZySG2rHuF57U8T1LpREfm75rZYCZ/M7t
rHe4YUmR2SXt9IDpXukMQf+8KkcVn391pFmCnUErXQSnak0E9CpHZVt4H3sJTA7+
sKc8MHs+bkwRyt/aF7PdIAkpg9R7L8ZWABzxEBroou7yExr9fPzj6JLiWYKNAVm6
+FIPFNJ3O4P90ng/nR/kDLL5dZbC7ncjoLxlpKmXSI1hJV3aLAonZ/QjYK73/Zwm
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8964322652958804377274136516336694358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desk.ame.sgcib.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25304817957177043957658814462020822262679815948114324162766805013635037498989842065968512436109398038592775660393847050895660721823867073103185516383145164230450192617017435179552399148581070198124431154025357303452301009760794873333432553705071152777286690994201302777020413058041022315571253088042551728054970762161013542585154076631012145181094122597606385027697598954220538530024812265271852199397575953797934375480359640901541707552775189327355747309499551554530601168725350286931048895864753392246439726522501880278024746656950523922217757198209440796731451303336484765090499799317097220220086959052113672152797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61a73900efc43f9624f43c66d987aef9482232a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ame.sgcib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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