fisso-hub.macif.fr

- MACIF -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:f3:be:6d:93:33:3c:8d:c3:38:b3:83:bc:00:ab:5d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MACIF

Organization: MACIF
Organization unit: IT
State / Province: Nouvelle-Aquitaine
Locality: NIORT
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f3:be:6d:93:33:3c:8d:c3:38:b3:83:bc:00:ab:5d
Serial Number (int): 21204010412648346697068512762921003869
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:82:35:68:63:c8:bd:be:8f:17:44:9b:0e:6a:29:84:09:a5:3c:cd
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 1c:7b:e0:e2:91:41:3d:7f:ac:f5:e2:dc:a0:81:69:ea:9c:c5:65:3a
Fingerprint (sha256): 36:a7:c4:fe:5a:1a:64:00:c6:16:e4:8c:38:6f:d3:16:e8:14:87:5f:a6:d5:46:2b:bc:e1:e9:12:aa:5b:e5:75

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate fisso-hub.macif.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fisso-hub.macif.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fisso-hub.macif.fr

Other certificates including the domain name macif.fr

(limited to 100 certificates)
www.macifevasions.macif.fr
jevote.macif.fr
jeparticipe.macif.fr
fisso-sp.macif.fr
messervices.macif.fr
communaute-auto.macif.fr
atelier.macif.fr
actualites.wiztopic.com
fisso-hub.macif.fr
atelier.macif.fr
signatureelectronique.macif.fr
actualites.wiztopic.com
www.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
emmcentre-rec.macif.fr
faq.macif.fr
mailhost.macif.fr
fisso-inter-vip.preprod.macif.fr
www.macifevasions.macif.fr
presse.macif.fr
sosg.macif.fr
mcs.macif.fr
servicesweb.macif.fr
atelier.macif.fr
connect.macif.fr
*.macif.fr
agence.macif.fr
actualites.wiztopic.com
atelier.macif.fr
agence.macif.fr
atelier.macif.fr
mcs.macif.fr
actualites.wiztopic.com
actualites.wiztopic.com
toad.macif.fr
toad.macif.fr
www.macifevasions.macif.fr
www.macif.fr
espacegandreck.macif.fr
www.brandcenter.macif.fr
www.macif.fr
preprod-presse.macif.fr
nvmp1815.macif.fr
www.ceidf.macif.fr
device.macif.fr
evenements.macif.fr
www.rsvm.macif.fr
www.macif.fr
presse.macif.fr
actualites.wiztopic.com
atelier.macif.fr
atelier.macif.fr
cds.macif.fr
communaute-auto.macif.fr
lessentiel.macif.fr
actualites.wiztopic.com
de.newsletter.events.renault.com
nvmp1816.macif.fr
as.macif.fr
as.macif.fr
actualites.wiztopic.com
ee.macif.fr
*.recette.macif.fr
rendezvousbrisdeglace-rec.macif.fr
gw.visio.vt.macif.fr
toad.macif.fr
satisfaction.macif.fr
agence.macif.fr
actualites.wiztopic.com
as.macif.fr
agence.macif.fr
pdtv.macif.fr
pca.macif.fr
lessentiel.macif.fr
www.macifevasions.macif.fr
jevote.macif.fr
www.macif.fr
satisfaction.macif.fr
expert.macif.fr
fisso-hub.macif.fr
signatureelectronique.macif.fr
signatureelectronique.macif.fr
i-reliure.macif.fr
as.macif.fr
jevote.macif.fr
rendezvousbrisdeglace.macif.fr
expert.macif.fr
messervices.macif.fr
presse.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
as.macif.fr
atelier.macif.fr
evenements.macif.fr
expert.macif.fr
gestionsante.macif.fr
messervices.macif.fr
www.macif.fr
communaute-auto.macif.fr

Certificate

The complete raw certificate details for fisso-hub.macif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21204010412648346697068512762921003869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nouvelle-Aquitaine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIORT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MACIF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fisso-hub.macif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745369738487014341438628372710944288423217397814829442417527707513847659356543413282323844929219226089113849318949797449156046024970336107753775371601177299217488229774025517687224985029979581725623652568389372768055285260035598184478539003730876217689286581607290478498010261484293947196232977618086332569390019732984735499355781333233620426329739860710101149122375529892075387325804309048321988337125598035877763736603849159414729822942856880299272652694704406310215008271516556165688143854708835101405331462652607633299422166957314267119203436274006655157416856841506887018669318598603625075394455302931817289400285488236641583201596374762964499447858019592021823742251736251307048150751350674887667290517664400600804856477459108858002238260338318725091419610299488942173599531004696488242689300931633550681515860168069555919902037546531128754952181510453696049468637002198314532933189910974854057500155721219838710126636256850800722510029602172120890767090280853940873326724685419048982695003695088645287824857079383376448603874911480543482110194624719185843829687787761996913332633171363854420935567307524441952513548872282057098629379110702732059428514473518032851400385999322650656912356222750226821096320549544938454945374141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b182356863c8bdbe8f17449b0e6a298409a53ccd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisso-hub.macif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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