*.solocalgroup.com

- PagesJaunes SA -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 0b:98:b9:b5:15:78:9d:93:15:82:0b:18 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PagesJaunes SA

Organization: PagesJaunes SA
State / Province: HAUTS-DE-SEINE
Locality: BOULOGNE-BILLANCOURT
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:98:b9:b5:15:78:9d:93:15:82:0b:18
Serial Number (int): 3588968810823387343369669400
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 78:19:18:be:07:d3:e8:bf:c2:9b:ee:e9:d2:df:7c:4d:24:1f:f0:bb
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): f9:cc:5d:aa:f8:6a:a6:fc:bf:0d:f7:ef:f9:18:4c:11:58:e4:ad:8a
Fingerprint (sha256): 47:98:b7:e3:bd:15:fd:43:f5:fd:f9:1b:ff:1a:f2:38:a4:77:89:5f:3f:50:eb:42:3d:32:4c:dc:13:cb:2b:ca

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.solocalgroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.solocalgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.solocalgroup.com
solocalgroup.com

Other certificates including the domain name solocalgroup.com

(limited to 100 certificates)
uk.solocalgroup.com
uk.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
basedeco.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
dialogue-parties-prenantes.solocalgroup.com
www.solocal.com
solocal-services.solocalgroup.com
uk.solocalgroup.com
gedapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
intranet.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
ppdapi.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
www.solocal.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
uk.solocalgroup.com
refs-business.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.sanmarco.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
tuleap.solocalgroup.com
*.sanmarco.solocalgroup.com
www.solocalgroup.com
www.solocalgroup.com
content-api.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
effectifs.solocalgroup.com
eureka.solocalgroup.com
uk.solocalgroup.com
ppdapi-portal.app.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
www.solocalgroup.com
*.apps.solocalgroup.com
uk.solocal.com
rec-gedapi.app.solocalgroup.com
campusdigital.solocalgroup.com
eureka.solocalgroup.com
*.apps.solocalgroup.com
*.solocalgroup.com
webhook.sup.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.apps.solocalgroup.com
effectifs.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
*.solocalgroup.com
uk.solocalgroup.com
uk.solocalgroup.com
solocal.com
uk.solocalgroup.com

Certificate

The complete raw certificate details for *.solocalgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxamPah5gjPkLTNR21Syt
wcZqEMc9K2QGf93gFyv6ZeQukBZYFlKi8VTQLKOyEE65fU8pkySyJEWhOYryK7Ru
1PosqzfP4oKSfEgvHkZgHeuOrI18KyOtK1RYencwjIRZAru48itYt8wdvd2YwaGo
8VpW4xSyiKvgD610KTs++KlTKrMOIAAdo++ABYRgCY0Hvd/5TiWpo/2rax0lPOdk
BzwJs8u1q7KubMDgiND0Iu4d68QO+3LSAup5+bj+ps37zst3lcvJHzzMBIVAZZD8
zOBUXid+wWRo5RdLPU6Go/0EMxzccAXAn1+Nq6E18nevEcXOHdP5BMfEq5n035N9
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3588968810823387343369669400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-12 14:21:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 07:36:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HAUTS-DE-SEINE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOULOGNE-BILLANCOURT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PagesJaunes SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.solocalgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24952559335648809382579590920978876101283691459228109858041980647927590737248066187134627819061665955765511130586209451503772894362694366454691834328741743259361824233325298922363691152173700254079670623762999271218985711152617083632572670914592273254715898044580478857787589396706250721192368866353822113716046010625133885340956309186026960570137587021026836505872145901812266668241933365299350309936899174617604771967251456650529067715251537248161474170296439084674393508747422246943225345778907831569324143949741550021869949999234688268384062612364273182671329300930931895744953296697677036508668701590818680700341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solocalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solocalgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							781918be07d3e8bfc29beee9d2df7c4d241ff0bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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