laruche.erdf.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:e7:88:5d:48:b0:61:6a:9a:d0:98:b6:d1:a9:7f:ca:7a was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:e7:88:5d:48:b0:61:6a:9a:d0:98:b6:d1:a9:7f:ca:7a
Serial Number (int): 1492445938659737346561688030987985803528826
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: e0:75:65:33:3a:63:c6:60:6a:98:90:97:c3:0c:c2:1f:87:19:be:bb
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 60:58:75:49:56:2b:ba:85:6f:04:e9:b4:df:fa:ad:ec:67:5e:5f:2c
Fingerprint (sha256): 40:56:52:e9:87:75:26:73:56:7a:35:de:ce:72:78:c5:60:14:c2:ad:ad:e4:2d:b3:d0:2c:d8:da:51:ad:90:2d


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate laruche.erdf.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for laruche.erdf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

laruche.erdf.fr

Other certificates including the domain name erdf.fr

(limited to 100 certificates)
s02.noe.ldap.qualif.alpha.swb.enedis.fr
espace-client-collectivites.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
sge-homologation2-b2b.erdf.fr
espace-client-connexion-pprod.erdf.fr
preiq-websso-gardian.edf.fr
zpl03748.zse.erdf.fr
api-lincs-qualif.enedis.fr
espace-client-entreprises-pprod.enedis.fr
noedmzplywdi001.intranet.edf.com
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
data.erdf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
ecampus.erdf.fr
sge.erdf.fr
fournisseursdenedis.enedis.fr
smartgrid-solenn.enedis.fr
bilan-electrique.erdf.fr
zpl03752.zse.erdf.fr
myaccess.myelectricnetwork.com
espace-client-connexion-perf.erdf.fr
api-lincs-perf.enedis.fr
pha.edf.com
data.erdf.fr
zpl03747.zse.erdf.fr
emm.erdf.fr
vpnzsa.edf.fr
fournisseursderdf-pp.erdf.fr
simm.sge-homologation.erdf.fr
zeq331ba.distribution.edf.fr
panorama.erdf.fr
enedis.fr
espace-client-pprod.enedis.fr
nomade.edf.fr
data.erdf.fr
websso-gardian.edf.fr
www.curde.enedis.fr
websso-gardian.edf.fr
espace-client-collectivites-perf.enedis.fr
espace-client-entreprises-perf.enedis.fr
collab.intranet.enedis.fr
ecampus.erdf.fr
espace-client-collectivites-pprod.enedis.fr
espace-client-entreprises.enedis.fr
vpnzsa.edf.fr
espace-client-rec-dmz.enedis.fr
ecampus.erdf.fr
preiq-websso-gardian.edf.fr
preiq-proxywebsso-gardian.edf.fr
enedis.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
api-lincs-rec-dmz.erdf.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
webmail.intranet.enedis.fr
websso-gardian.edf.fr
noedmzplywfe001.intranet.edf.com
espace-client-connexion-rec-dmz.erdf.fr
enedis.fr
espace-client-connexion-pprod.erdf.fr
odigo-pic.erdf.fr
data.erdf.fr
espace-client-collectivites-rec-zhb.enedis.fr
sge.erdf.fr
espace-client-pprod.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
websso-gardian.edf.fr
pha.edf.com
ecampus.erdf.fr
bilan-electrique.erdf.fr
zer331b8.distribution.edf.fr
espace-client-connexion-rec-dmz.erdf.fr
simm.sge-homologation.erdf.fr
laruche.erdf.fr
s01.pcy.ldap.qualif.alpha.swb.enedis.fr
espace-client-connexion-rec-dmz.erdf.fr
camae.enedis.fr
espace-client-entreprises.enedis.fr
herakles-iq.erdfdistribution.fr
collab.intranet.edf.com
preiq-proxywebsso-gardian.edf.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
datalake.erdf.fr
zer331ba.distribution.edf.fr
lincs-staging-pprod.enedis.fr
data.erdf.fr
webmail.intranet.edf.com
espace-client-rec-dmz.erdf.fr
espace-client-particuliers.enedis.fr
espace-client-entreprises.erdf.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
vpnzsa2.edf.fr
nomade2020.edf.fr
zed331b4.distribution.edf.fr
panorama.erdf.fr
zer331b8.distribution.edf.fr

Certificate

The complete raw certificate details for laruche.erdf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFanQMbvrUapMzHQ5NeW
6++/stSxAJOPP8qFgIdQNPV9qTO/IWwGY6ucRRC+ECZtdRtnmmFS+L0aXLLJUqcf
JFtXqXg8O+ZBoDhQJJUYYeHeYqZ8KgK2p6mCgThfMvSXxqaKdvZ8jbL5yxNjEpRK
V7ClsTOL5ZBKRk3JGkEFZqTxTIlrBFruW+KDPZAooTIp7sOjGK1ETmoAz11ZX5oz
FafQoaTrdDdTbv7S8J9RsmlvldXjyGnNNWh8jEiyMBXAwnibQ5FBamJ93sovYZmK
khRLyG8FDZPEx+XMqzhAFcM379ssQq6HkLO7xTYNLbFZSeqW7LRJ+KN9cDoRmslV
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492445938659737346561688030987985803528826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-21 12:27:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-21 12:27:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'laruche.erdf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24785438124022508092322583774324153360448301380124447311400030077367185494919774843165510004271205526419655374350523117600470837982529345439062763654004034024284429997289947491009214539121009607913981683583696158468971682792284648933528403548410234668298998155738898072299690783944773143135966926882165110095649142496876120241781143615381582073253248067359038980476708829162914050264121063640657986021325826322561314613374087006507760747086943066977525820139806026137414943985280827469914604808486236242908331539352555752491076856742716209401077464828858371732436152540652384975314942418200411315391948192116439078253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laruche.erdf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e07565333a63c6606a989097c30cc21f8719bebb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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