espace-client.lanef.com

- SOCIETE FINANCIERE DE LA NEF -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 04:14:99:c4:d2:74:52:b9:ca:4f:b1:06:9d:0a:6b:b1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOCIETE FINANCIERE DE LA NEF

Company registration number: 339 799 116
Organization: SOCIETE FINANCIERE DE LA NEF
Organization unit: IT
Locality: VAULX EN VELIN RHONE
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:99:c4:d2:74:52:b9:ca:4f:b1:06:9d:0a:6b:b1
Serial Number (int): 5423876722832049664405945956195527601
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:a1:c4:a8:6c:7e:ac:16:3e:db:aa:0d:d9:cf:a1:98:ed:c5:72:a1
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): 04:56:2a:02:0d:39:08:77:94:97:30:c5:8d:ed:87:32:41:29:8e:d4
Fingerprint (sha256): 48:35:9e:d1:a9:fd:e9:1c:c1:11:d7:46:5c:bb:84:1a:b9:e8:e5:24:dc:b2:22:a9:bc:4a:ba:b2:ad:2e:f4:6e

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate espace-client.lanef.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for espace-client.lanef.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

espace-client.lanef.com

Other certificates including the domain name lanef.com

(limited to 100 certificates)
avosquestions.lanef.com
avosquestions.lanef.com
avosquestions.lanef.com
ag.lanef.com
avosquestions.lanef.com
espace-client.lanef.com
avosquestions.lanef.com
avosquestions.lanef.com
www.bengaluru.tk
*.lanef.com
espace-client.lanef.com
*.lanef.com
wikinef-viecoop.lanef.com
espace-client.lanef.com
ag.lanef.com
espace-client.lanef.com
*.lanef.com
avosquestions.lanef.com
*.lanef.com
espace-client.lanef.com
espace-client.lanef.com
wikinef-viecoop.lanef.com
avosquestions.lanef.com
ag.lanef.com
kadurawebservices.fr
www.lohithshiv.com
financeparticipative.lanef.com
wikinef-viecoop.lanef.com
espace-client.lanef.com
*.lanef.com
avosquestions.lanef.com
avosquestions.lanef.com
ag.lanef.com
*.lanef.com
espace-client.lanef.com
mekong-erlangen.de
avosquestions.lanef.com
ag.lanef.com
espace-client.lanef.com
*.lanef.com
*.lanef.com
madricapp.co.in
espace-client.lanef.com
*.lanef.com
aide.lanef.com
*.lanef.com
avosquestions.lanef.com
avosquestions.lanef.com
*.recette-pro.lanef.com
avosquestions.lanef.com
oks-kamini.com.ua
avosquestions.lanef.com
avosquestions.lanef.com
ag.lanef.com
www.lamela.mk
app.nefpro.lanef.com
*.lanef.com
avosquestions.lanef.com
*.lanef.com
avosquestions.lanef.com
avosquestions.lanef.com
*.lanef.com
wikinef-viecoop.lanef.com
*.lanef.com
mekong-erlangen.de
*.recette-pro.lanef.com
www.preoccupations.ca
*.lanef.com
ag.lanef.com
avosquestions.lanef.com
espace-client.lanef.com
aide.lanef.com
ag.lanef.com

Certificate

The complete raw certificate details for espace-client.lanef.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+qD0jcn/KTQrD/5xJ6Z
o7cor/VAadltScQ3xUAORE1HUbw4yNbeG8AYyOXY1FpppDkebWaI1Z6/yTKDEKIf
zIbVEnC1Sqv5jlySA0xWNnVjLEOyI4JLA8LpLOiZipb0AYA9Kl3aZWc+OfT4oRf7
cPnsPxz8n4UDFfyu+/7sykYcXjrW9xDnkc34JwyQ3+zpd5F1lZkR+5OtW7G7Pw9I
2hri8aIH0zU14alVxucv5xroZxcm34iYUlK9XlTT+lAqS6+Inn5g65Pl8yOvEHzO
Y1OvaFl5M0co+WDekSuakzN8zjwxHMET1xuQEb5bRon/KI5i6XV8Qz3dFIPX8vHp
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5423876722832049664405945956195527601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '339 799 116'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VAULX EN VELIN RHONE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE FINANCIERE DE LA NEF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'espace-client.lanef.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19682580890035429690051251322934962577594967167784711602102532835854703472725530991470617863018323031140185105580607037198671239442947425089245399149576760222501480540211519328892204854292852403015918913265464145749098500768752239262092993939431590726638154282761276287973588151502732050354505757022670412983949618496345197163210166017253379358933898272689657899359695092092126803137552418006755094215275285208393246893336476677160097692919300486200636146748680503614593248869554421898866601963290006792401692085057161919781918599574846316819654315584469543344459244884389239368906582665971651471258348716246042798477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53a1c4a86c7eac163edbaa0dd9cfa198edc572a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.lanef.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ae5654a4a69ba0d5a6c60ec5700a580bac92f178471b53919cb615881a873f6b80df6a3340f123414e19a877b4c454511dcafa7da28ba80a8a207d1a548bd9e6fb4412b1355b5c5638e6317f6f56d91f6ba24de16dce437dc7f9031847e811ddbd707f457ff044523f12f1584a62ee2c4037996366c08cb1e7af69e122908b513f1f67ee97aa55bc91c0ec6b2005af553a64c8e814f1492b8f12300b5a3bd0462a473e31d3134b4087ce831fb976c7ff7c5e079c9a9315d4cd6e9b31c7e2cf8ab7bc0d12eaa05923c2cdfd9517985ed5c865d90effb9015da744bba83604a57828b0d29390558c23d0182769c726214a12b54a57bc3b36f60be34b43e4ef0b3