adherent.mnh.fr

- MUTUELLE NAT HOSPIT PROF SANTE SOCIAL -

Issued by thawte Extended Validation SSL CA

About this certificate

This digital certificate with serial number 0c:7a:cd:8c:9d:c6:0a:43:dc:9e:32:96:74:78:46:0a was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

MUTUELLE NAT HOSPIT PROF SANTE SOCIAL

Company registration number: 775 606 361
Organization: MUTUELLE NAT HOSPIT PROF SANTE SOCIAL
Organization unit: DSI
State / Province: Loiret
Locality: AMILLY
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Terms of use at https://www.thawte.com/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7a:cd:8c:9d:c6:0a:43:dc:9e:32:96:74:78:46:0a
Serial Number (int): 16588365200900302364699330916015162890
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: cd:32:e2:f2:5d:25:47:02:aa:8f:79:4b:32:ee:03:99:fd:30:49:d1

Fingerprint (sha1): 76:fb:fc:34:b1:89:1a:28:ee:d9:4c:0c:fd:b5:0c:7c:50:8f:e9:b4
Fingerprint (sha256): 44:92:86:cd:68:76:f9:59:7e:f1:96:df:f8:5b:6d:87:49:38:e1:5d:ee:49:3e:31:1c:62:fc:cc:1e:12:a9:56

Issuing Certificate URL: http://crl.thawte.com/ThawteEVCA2006.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawteEVCA2006.crl

Check the revocation status for certificate adherent.mnh.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adherent.mnh.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adherent.mnh.fr

Other certificates including the domain name mnh.fr

(limited to 100 certificates)
imperva.com
adhesion.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
incapsula.com
imperva.com
imperva.com
akamai-san109.exacttarget.com
www.mnh.fr
incapsula.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
www.mnh.fr
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
*.mnh.fr
www.mnh.fr
incapsula.com
incapsula.com
imperva.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
adherent.mnh.fr
*.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
secgate.mnh.fr
www.mnh.fr
www.mnh.fr
incapsula.com
ppradherent.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
ppradherent.mnh.fr
secgate.mnh.fr
incapsula.com
incapsula.com
incapsula.com
secgate.mnh.fr
incapsula.com
incapsula.com
adherent.mnh.fr
adherent.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
ppradherent.mnh.fr
incapsula.com
secgate.mnh.fr
sts.mnh.fr
*.mnh.fr
sts.mnh.fr
adherent.mnh.fr
sts.mnh.fr
imperva.com
incapsula.com
incapsula.com
incapsula.com
concours-mnh-bfm.mnh.fr
adherent.mnh.fr
incapsula.com
incapsula.com
incapsula.com
*.mnh.fr
incapsula.com
sts.mnh.fr
incapsula.com
imperva.com
sts.mnh.fr
ppradherent.mnh.fr
*.mnh.fr
sts.mnh.fr
akamai-san109.exacttarget.com
imperva.com
*.mnh.fr
certificat-mutualiste.mnh.fr
incapsula.com
akamai-san109.exacttarget.com
sts.mnh.fr
incapsula.com
secgate.mnh.fr
incapsula.com
www.mnh.fr
incapsula.com
sts.mnh.fr

Certificate

The complete raw certificate details for adherent.mnh.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv30lrc+Eb/w9HG3S/07e
1OqEfpo7RZ7AktUsilZozWfJdJNRaBFwcBFUz1hM9zavBo724k2h48vlFrSj40j7
arEWIBNakMm9zt9CTdc5x6K/I+7C68aiq4lnO1uPrFFlX0l3gVX1Lu51/9GNN0j0
9VqvY/33yTYFve/rl1qXqlqyZWp6IyXZsCfoKlkv/PEfbxyH7DLnvkAF07wkgN7Q
bcMcKZpP3t23O/Bha4eoosM2KPOfAQNsmsX+Li7fB/JmFx5dpWcVE2Sim7L+GwjN
nUvWokAZPDVmmuou/e4vXbxmV68FmrfkTq7wbFZ5kt72oddMNH0Qu9udmi6eHS8o
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16588365200900302364699330916015162890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.thawte.com/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MUTUELLE NAT HOSPIT PROF SANTE SOCIAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loiret'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'AMILLY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '775 606 361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'adherent.mnh.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24173228624698320173149352358941202381543500259696245397125101653113891690587244127318047719040052709129463374622976761873895018713767266667012804709100675911752314424714461250193502904284946057191502440404124339708235211257997391269151586045155665647600016296079957807096634316042232542580676132387180045092122853027898733779821757085809214966385572126475528541277147254268147135572086448720588648432106191547569142146236383908309122405106618190969206144433806116180669683918468667067636069518796459473714880207787039754364643149998622990536463751061160728774929755234968838342676385820721199061236140727563522615357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adherent.mnh.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cd32e2f25d254702aa8f794b32ee0399fd3049d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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