espace-client-connexion-rec-dmz.erdf.fr

- ENEDIS -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:41:87:80:95:ee:f5:23:aa:54:50:f1:d8:87:01:ea:1b was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ENEDIS

Organization: ENEDIS
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:41:87:80:95:ee:f5:23:aa:54:50:f1:d8:87:01:ea:1b
Serial Number (int): 1492225282336144463289993587956194597792283
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 25:a7:dd:83:b3:66:c7:32:a5:c0:6e:39:3e:0d:52:f5:11:47:04:c0
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 99:53:cc:7f:65:da:6c:34:f1:2c:ce:64:dc:9c:4c:f5:53:c4:5a:1a
Fingerprint (sha256): 3e:d4:21:03:7a:b5:b8:58:8c:b5:21:62:c9:5b:fa:f2:c3:65:53:bb:7d:30:70:dc:21:9e:02:85:b9:a1:05:41


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate espace-client-connexion-rec-dmz.erdf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espace-client-connexion-rec-dmz.erdf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espace-client-connexion-rec-dmz.erdf.fr

Other certificates including the domain name erdf.fr

(limited to 100 certificates)
s02.noe.ldap.qualif.alpha.swb.enedis.fr
espace-client-collectivites.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
sge-homologation2-b2b.erdf.fr
espace-client-connexion-pprod.erdf.fr
preiq-websso-gardian.edf.fr
zpl03748.zse.erdf.fr
api-lincs-qualif.enedis.fr
espace-client-entreprises-pprod.enedis.fr
noedmzplywdi001.intranet.edf.com
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
data.erdf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
ecampus.erdf.fr
sge.erdf.fr
fournisseursdenedis.enedis.fr
smartgrid-solenn.enedis.fr
bilan-electrique.erdf.fr
zpl03752.zse.erdf.fr
myaccess.myelectricnetwork.com
espace-client-connexion-perf.erdf.fr
api-lincs-perf.enedis.fr
pha.edf.com
data.erdf.fr
zpl03747.zse.erdf.fr
emm.erdf.fr
vpnzsa.edf.fr
fournisseursderdf-pp.erdf.fr
simm.sge-homologation.erdf.fr
zeq331ba.distribution.edf.fr
panorama.erdf.fr
enedis.fr
espace-client-pprod.enedis.fr
nomade.edf.fr
data.erdf.fr
websso-gardian.edf.fr
www.curde.enedis.fr
websso-gardian.edf.fr
espace-client-collectivites-perf.enedis.fr
espace-client-entreprises-perf.enedis.fr
collab.intranet.enedis.fr
ecampus.erdf.fr
espace-client-collectivites-pprod.enedis.fr
espace-client-entreprises.enedis.fr
vpnzsa.edf.fr
espace-client-rec-dmz.enedis.fr
ecampus.erdf.fr
preiq-websso-gardian.edf.fr
preiq-proxywebsso-gardian.edf.fr
enedis.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
api-lincs-rec-dmz.erdf.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
webmail.intranet.enedis.fr
websso-gardian.edf.fr
noedmzplywfe001.intranet.edf.com
espace-client-connexion-rec-dmz.erdf.fr
enedis.fr
espace-client-connexion-pprod.erdf.fr
odigo-pic.erdf.fr
data.erdf.fr
espace-client-collectivites-rec-zhb.enedis.fr
sge.erdf.fr
espace-client-pprod.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
websso-gardian.edf.fr
pha.edf.com
ecampus.erdf.fr
bilan-electrique.erdf.fr
zer331b8.distribution.edf.fr
espace-client-connexion-rec-dmz.erdf.fr
simm.sge-homologation.erdf.fr
laruche.erdf.fr
s01.pcy.ldap.qualif.alpha.swb.enedis.fr
espace-client-connexion-rec-dmz.erdf.fr
camae.enedis.fr
espace-client-entreprises.enedis.fr
herakles-iq.erdfdistribution.fr
collab.intranet.edf.com
preiq-proxywebsso-gardian.edf.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
datalake.erdf.fr
zer331ba.distribution.edf.fr
lincs-staging-pprod.enedis.fr
data.erdf.fr
webmail.intranet.edf.com
espace-client-rec-dmz.erdf.fr
espace-client-particuliers.enedis.fr
espace-client-entreprises.erdf.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
vpnzsa2.edf.fr
nomade2020.edf.fr
zed331b4.distribution.edf.fr
panorama.erdf.fr
zer331b8.distribution.edf.fr

Certificate

The complete raw certificate details for espace-client-connexion-rec-dmz.erdf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKBy6+lhcDM57hjBF4kr
hiz+h/S26f1mFG69p8jnZnBWAB6poUu63uUip+Q6FNV3mFLJ55K8NgIRPLmwOdij
vHmQ6hNNp2Xwj0ZCSdAPDdhhrGbFjusMgzK4snIaVi2rFXny0Q9GfW4uwDSaVofY
qToAom2C+nycIr/zWuWjBk6KiKpsdgMbezWICsfpFOGe3Af/9f7w580pVQjoC6h5
ypuNgVqWEplHS94h61vZxDT7junY+scPnGUyMNxzITb4L46opmRkxZ3TAAAB+IAI
vXF5jAskXRWZHDbha+CUZlBmLc6KeeQ+ZJgVTP7Z6a8kCP9r45LefvrTgVdAmF2Y
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492225282336144463289993587956194597792283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 10:58:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 10:58:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ENEDIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espace-client-connexion-rec-dmz.erdf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24821828080820372680363872253869913359867308715966151780500032038450366776390049964864080041423268240748827628699011664324135712167206547379087556794196063907274571048837030293396184957942958682706784368973130041654048662959255933258675073085965884446375752708231913901724429900905002074115699379735921914802114085866088742007214197713098881763403998133358075952287722962211587976657395599726290763101827842948124195295128881128032637999410447250172570440550124104438718762272011734457373484325460950784639278711311752110208717593861090468785164054938567477353313965138468858311107560139327761057792414578502019160181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-connexion-rec-dmz.erdf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25a7dd83b366c732a5c06e393e0d52f5114704c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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