maxactif-tgvinoui.sncf

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:db:e8:ba:ec:42:dc:e2:25:60:54:ac:d2:1a:26:39 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maxactif-tgvinoui.sncf

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:db:e8:ba:ec:42:dc:e2:25:60:54:ac:d2:1a:26:39
Serial Number (int): 18421797285808602953318458044505007673
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:09:95:30:33:ba:f1:f2:0b:ae:a8:46:4e:f3:28:55:9e:7b:c2:f2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 04:06:9a:de:16:2b:0d:f6:d2:82:11:76:7d:69:c5:42:96:d4:ba:cd
Fingerprint (sha256): 42:9e:4d:49:0e:58:54:5a:62:1a:c2:2c:39:b2:87:ca:fe:9b:52:d9:f2:ea:61:09:6b:45:b9:e4:ed:38:02:5e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate maxactif-tgvinoui.sncf

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maxactif-tgvinoui.sncf

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maxactif-tgvinoui.sncf
tgvinoui.sncf
www.monbillet.sncf
www.gds.wdi-vsct.com
ouisncf.com
gds.wdi-vsct.com
monbillet.sncf
maxjeune-tgvinoui.sncf
monidentifiant.sncf
maxsenior-tgvinoui.sncf

Other certificates including the domain name maxactif-tgvinoui.sncf

(limited to 100 certificates)
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
*.maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf

Certificate

The complete raw certificate details for maxactif-tgvinoui.sncf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwRGzLGeGAhJTeKqxnQl
uoaYwOLC7nLkmUIxoktX9HZHj4hTV6q199bWU+RnkFV7TlMXWBITmzlh/cbzPIMG
V8hylYfy9GjjeBWf0tG3rpqCWjKH6jYkXE+thHBSK7884v69EQBxynVjFD7BsLey
YYDKPfs+bi70PBEf8iOzcWhpLVhS0WaPAn2ijSb65koee6KlMn0Dvv+fHRIokqsZ
pTScPGM3glhBXlCpbUJOWtBpQgdg6Ts+NPk3T36s0n26PtycGprDldqHYlh3fHko
oDHsYjyeqWbdlKe/pu2dDUx+m6Flifbq+//ShMmN8FHXwKHHImtPj8N8ZUWOuOAR
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18421797285808602953318458044505007673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maxactif-tgvinoui.sncf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123531539013439679542296431638317763787981735598070458933835568993264811599418806948582027120680285816213391128229897721735440157253910645881008389495785299681855271494983582837861883873261541522526128111542360614168796222824237209897780476929493584183040500048335944484296849050416709648892723768029382659533133635184602940435868755141197666608264662666205386944152897097011627118719855086845194556093576430993309760694650033037811467682361428045184444278737803208562323827328690668767753615565418424916297010404595209125283635895429247182633220713069537804740832327564180797870793101397029814439786945402248368599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3309953033baf1f20baea8464ef328559e7bc2f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxactif-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monbillet.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gds.wdi-vsct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouisncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds.wdi-vsct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monbillet.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxjeune-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monidentifiant.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxsenior-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009aafb6185e80d75c6232a05a1a81e4799ea8d478bfdcd61962ac7711d8b68bcf664d1fe4c3761feb48c34581a1d2fc6c5491ba0205429734b8ecf6fb2990b5b43843a1c385e8e691ef0fbabb27c65ed05d771658e38450bccb17c86dc16fa0e4215e58bc0d5f8e898d8ff98fdfdbcbf671b0e7d67ce0b3a0ced452843bbff8769072a5d6ada9a26579057577119b7a313201c87e5755b7392edb1de41d1d5659e9fb6328bc910fa9dd997e1fb48b0013d387303d8e227840fa185cf3f81c9e07f15c00e2cc8f3bd3608af7caade931a7022f9100bc2a7f20d63734b58ec04410cd9447023f0ba84c5a219540f214824d06c21d97d7ec8bf23958e282aab7f906