messervices.macif.fr

- MACIF -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:ba:f0:94:d3:5e:05:59:53:d8:89:cc:da:53:86:ad was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MACIF

Organization: MACIF
Organization unit: IT
State / Province: Nouvelle-Aquitaine
Locality: Niort
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ba:f0:94:d3:5e:05:59:53:d8:89:cc:da:53:86:ad
Serial Number (int): 10275242755669818920238984888784750253
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:24:4b:7f:34:c2:39:2a:1d:c9:8b:c7:a8:b6:81:39:0e:24:36:40
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): b5:ae:5a:37:2a:3d:bc:ec:b3:a9:e0:b8:a5:90:f2:bb:cb:b6:61:1f
Fingerprint (sha256): 43:71:e2:51:dd:03:91:21:7c:33:fe:b8:34:b7:68:ac:79:36:64:60:c5:61:97:44:b9:ae:40:9d:b1:d9:75:e6

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate messervices.macif.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for messervices.macif.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

messervices.macif.fr
remorquage.messervices.macif.fr

Other certificates including the domain name macif.fr

(limited to 100 certificates)
www.macifevasions.macif.fr
jevote.macif.fr
jeparticipe.macif.fr
fisso-sp.macif.fr
messervices.macif.fr
communaute-auto.macif.fr
atelier.macif.fr
actualites.wiztopic.com
fisso-hub.macif.fr
atelier.macif.fr
signatureelectronique.macif.fr
actualites.wiztopic.com
www.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
emmcentre-rec.macif.fr
faq.macif.fr
mailhost.macif.fr
fisso-inter-vip.preprod.macif.fr
www.macifevasions.macif.fr
presse.macif.fr
sosg.macif.fr
mcs.macif.fr
servicesweb.macif.fr
atelier.macif.fr
connect.macif.fr
*.macif.fr
agence.macif.fr
actualites.wiztopic.com
atelier.macif.fr
agence.macif.fr
atelier.macif.fr
mcs.macif.fr
actualites.wiztopic.com
actualites.wiztopic.com
toad.macif.fr
toad.macif.fr
www.macifevasions.macif.fr
www.macif.fr
espacegandreck.macif.fr
www.brandcenter.macif.fr
www.macif.fr
preprod-presse.macif.fr
nvmp1815.macif.fr
www.ceidf.macif.fr
device.macif.fr
evenements.macif.fr
www.rsvm.macif.fr
www.macif.fr
presse.macif.fr
actualites.wiztopic.com
atelier.macif.fr
atelier.macif.fr
cds.macif.fr
communaute-auto.macif.fr
lessentiel.macif.fr
actualites.wiztopic.com
de.newsletter.events.renault.com
nvmp1816.macif.fr
as.macif.fr
as.macif.fr
actualites.wiztopic.com
ee.macif.fr
*.recette.macif.fr
rendezvousbrisdeglace-rec.macif.fr
gw.visio.vt.macif.fr
toad.macif.fr
satisfaction.macif.fr
agence.macif.fr
actualites.wiztopic.com
as.macif.fr
agence.macif.fr
pdtv.macif.fr
pca.macif.fr
lessentiel.macif.fr
www.macifevasions.macif.fr
jevote.macif.fr
www.macif.fr
satisfaction.macif.fr
expert.macif.fr
fisso-hub.macif.fr
signatureelectronique.macif.fr
signatureelectronique.macif.fr
i-reliure.macif.fr
as.macif.fr
jevote.macif.fr
rendezvousbrisdeglace.macif.fr
expert.macif.fr
messervices.macif.fr
presse.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
as.macif.fr
atelier.macif.fr
evenements.macif.fr
expert.macif.fr
gestionsante.macif.fr
messervices.macif.fr
www.macif.fr
communaute-auto.macif.fr

Certificate

The complete raw certificate details for messervices.macif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10275242755669818920238984888784750253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nouvelle-Aquitaine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niort'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MACIF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'messervices.macif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963410912222339888766128751037605013064117459687010077440829320621838943398428289203198354001578926564280907172617304217240833853478348135206362332814833003399881858194983022398951888686411422551100132806928013012713500864001203859353013391626292939808504921809425003644344302057279833802564898141130171215561921867525819160358299710141369549907220743947426147952580551767197938289603204145529037745372106141310060428920858666507099025647046544749225557551641684439949491394503669656927580203080894400858510067844786517424337978034019432403559808017988622006752966919538224467863598549147351039248954940742668081486360971276590533807786027992010667486583104080929163556799676114993469255488531986796595301524527768428564737530955054590629366627551421180152731233385922815008034287818479114181088688726446526692250182026568897354707346186010076892720184388145450531164322350624728953990061563041385543498294000191931848274034422360798607715535918263052122376009117367516435794346487264702740027997812534974176787621924147512436991895908278752359683740879186732648418060757840116689222612599664246616765153966593269546429619088750723298431045828547002042049080190013831603424883215677765052884410611516829712628601525306230075989768711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf244b7f34c2392a1dc98bc7a8b681390e243640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messervices.macif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remorquage.messervices.macif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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