www.arkeaassistance.fr

- FEDERAL SERVICE GIE -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:a7:ac:25:b7:c8:fa:e6:0d:a3:90:75:ae:71:f2:0a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FEDERAL SERVICE GIE

Organization: FEDERAL SERVICE GIE
Locality: Le Relecq Kerhuon
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a7:ac:25:b7:c8:fa:e6:0d:a3:90:75:ae:71:f2:0a
Serial Number (int): 15492113091781958727583596193296544266
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:fb:3d:07:f0:f8:9b:6c:ad:25:72:d1:5c:31:53:77:66:87:c7:52
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b0:13:a0:1c:22:3f:e1:7c:a7:c8:f6:5c:d7:be:f3:0c:44:a4:d5:44
Fingerprint (sha256): 4e:1f:1d:73:9e:38:fd:8d:4e:15:a5:03:a1:2b:0b:a2:cd:e2:94:7b:96:21:e6:ba:f1:8f:db:38:a9:dc:ea:dd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.arkeaassistance.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arkeaassistance.fr

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arkeaassistance.fr

Other certificates including the domain name arkeaassistance.fr

(limited to 100 certificates)
www.arkeaassistance.fr
domus.rec.arkeaassistance.fr
domus.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
domus.arkeaassistance.fr
ensemble.rec.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
domus.arkeaassistance.fr
domus.rec.arkeaassistance.fr
ensemble.rec.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr

Certificate

The complete raw certificate details for www.arkeaassistance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15492113091781958727583596193296544266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Le Relecq Kerhuon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FEDERAL SERVICE GIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.arkeaassistance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4354793014370537376924147627459512256539793700470928218360999167692772667154589168071273934042381857235391499216086776955030801949661435885837665999887031543772008653215951762502325571329438564930595442432601733228887826888963966022294684384874547925112132670453842372547810133705069321917672182585965376324618169336828310329576589703154036674594938563821978489399489983745450722579485112403865710453775708277333616674626307398592449817187713804861362233529183236354694074075951754990157916267238510797396432852057478575728067201930614382549929563935203564051707266830455456137926681598672932107092453261602957338828546467463919376054836156563920335996300347812495618233994546075510008734619407099627155335169891452667141401293951057682428631409538379797394023282674769705774191331085383842713206785528131439645255009604142021596512253898591190487750402945857162874554108444307099376117862569117008457894926028247096331061389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbfb3d07f0f89b6cad2572d15c3153776687c752
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkeaassistance.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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