maxactif-tgvinoui.sncf

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:2d:61:3f:59:ae:5d:6f:9e:7c:71:e5:a4:3d:5b:da was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maxactif-tgvinoui.sncf

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:2d:61:3f:59:ae:5d:6f:9e:7c:71:e5:a4:3d:5b:da
Serial Number (int): 12198677733559062915906810791872781274
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a5:91:8b:5c:83:02:ef:6f:38:05:74:5d:b5:f9:dc:8c:19:3c:3b:ef
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c8:87:ec:36:8b:df:62:95:b1:85:cf:39:17:7e:5c:ba:71:f4:ab:c3
Fingerprint (sha256): 42:d0:ca:71:a5:9e:d2:2c:af:86:67:cf:23:0a:08:50:16:51:07:68:ed:f6:07:d5:63:d6:d4:8c:a6:a2:5a:a4

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate maxactif-tgvinoui.sncf

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maxactif-tgvinoui.sncf

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maxactif-tgvinoui.sncf
tgvinoui.sncf
www.monbillet.sncf
www.gds.wdi-vsct.com
ouisncf.com
gds.wdi-vsct.com
monbillet.sncf
maxjeune-tgvinoui.sncf
monidentifiant.sncf
maxsenior-tgvinoui.sncf

Other certificates including the domain name maxactif-tgvinoui.sncf

(limited to 100 certificates)
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
*.maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf
maxactif-tgvinoui.sncf

Certificate

The complete raw certificate details for maxactif-tgvinoui.sncf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJo/R9PPVXBgSFKOZ7vv
J+lDrHemfeWPtH8Yc1MfXtoVPYMTXsnG8PsOhe1779U6MlYgTsewaorKs1Nds7Xy
zd2H7PflK3YP1zhan8CEscFM0GmSD6qjcCrY1V1+rGjgxivzWrLmD0NHJYU6CvJL
EO9EKwmEaGzKSn8m3GMhX2k7WF6qLprguz6CttI+QxzqrVM0eyaspqIMv17FO6bA
owMeUb+aiWjWqvB6EANuv1KUbyUv64PmTyaVrHUbnwQCLvPYVXGZYa8TANL0OE/R
jOP6kw4MYNO5gKEx+glQTdicue5+h/QvmHPciLcEboq3lQeCW5ock1tk/FknYi11
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12198677733559062915906810791872781274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maxactif-tgvinoui.sncf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22294003798165677921577781048409851880693119635537814184678363096928742130829226211398901642417523290177791101002150509936501007999903255358060830230627687998314056508215158134643682531227040973009677823212413861656875031748768678054390141645672067857510480642358889471817314998057025077639330980245214307572085798746889430670296869079194258284346706306732280650172399907772888999662451153604680310373772110042448042626002274078340095677677653918190639211532303060038698050525063808288162367040385399851440583560668637687127389440119495339173119474368119355086557734839730954629834779652181914284365676143974969865591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5918b5c8302ef6f3805745db5f9dc8c193c3bef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxactif-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monbillet.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gds.wdi-vsct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouisncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds.wdi-vsct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monbillet.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxjeune-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monidentifiant.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxsenior-tgvinoui.sncf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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