sebasiahress.seb.com

- SEB Developpement -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6f:80:c5:25:c4:2c:77:f3:82:a3:fa:b9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SEB Developpement

Organization: SEB Developpement
State / Province: Auvergne-Rhône-Alpes
Locality: Ecully
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:80:c5:25:c4:2c:77:f3:82:a3:fa:b9
Serial Number (int): 34508509597942436428335282873
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d2:6b:88:1a:b4:a1:c5:cd:99:b1:43:01:91:04:7c:a0:56:eb:c3:be
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 7e:cd:7f:3c:31:f2:a2:a4:0a:cf:27:b7:47:86:e5:0c:d0:14:1b:76
Fingerprint (sha256): 4e:47:ac:db:93:0b:9c:9a:46:53:c6:b8:6d:4c:1b:a5:7c:64:cc:17:85:46:51:bc:33:c9:f3:14:c1:87:c4:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate sebasiahress.seb.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sebasiahress.seb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sebasiahress.seb.com

Other certificates including the domain name seb.com

(limited to 100 certificates)
account.rcu.seb.com
horoquartz-qual.seb.com
vpn.seb.com
horoquartz.seb.com
qa.openfoodsystem.com
horoquartz.seb.com
seb.com
vpn.seb.com
bastion.seb.com
mail-eu.seb.com
horoquartz-qual.seb.com
sp00i361.seb.com
sp07t002.seb.com
SP02R876.seb.com
sebasiahress.seb.com
myitatseb.seb.com
einvoice.seb.com
mdm.seb.com
mdm.seb.com
fs.seb.com
*.wp.seb.com
brazil.transport.seb.com
mdm.seb.com
myitatseb.seb.com
qual.hrdataviz.seb.com
account.rcu.seb.com
account.rcu.seb.com
hrdataviz.seb.com
fs.seb.com
sebasiahress.seb.com
jenkins.dcp.seb.com
qliksense.seb.com
jira.seb.com
account.rcu.1.seb.com
dam.seb.com
jenkins.dcp.seb.com
sp00i361.seb.com
www.seb.com
mail-eu.seb.com
notilus-prod.seb.com
turkey.btob.seb.com
fs.seb.com
mail-eu.seb.com
mail-eu.seb.com
account.rcu.seb.com
sebasiahress.seb.com
vpn.seb.com
jiraqual.seb.com
seb.com
bastion.seb.com
easyo.seb.com
seb.com
pics-qual.seb.com
account.rcu.2.seb.com
jiraqual.seb.com
fs.seb.com
account.rcu.2.seb.com
account.rcu.2.seb.com
fs2.seb.com
account.rcu.seb.com
turkey.einvoice.seb.com
qliksense.seb.com
bastion.seb.com
easyo.seb.com
sp07t002.seb.com
mdm.seb.com
einvoice.seb.com
account.rcu.seb.com
dev.streaming.analytics.seb.com
account.rcu.2.seb.com
seb.com
seb.com
seb.com
jira.seb.com
www.seb.com
brazil.transport.seb.com
einvoice.seb.com
jira.seb.com
qa.openfoodsystem.com
account.rcu.2.seb.com
account.rcu.2.seb.com
pics.seb.com
saml.seb.com
mail-eu.seb.com
mail-eu.seb.com
mail-eu.seb.com
fs2.seb.com
jenkins.dcp.seb.com
turkey.einvoice.seb.com
mdm.seb.com
vpn.seb.com
vpn.seb.com
jenkins.dcp.seb.com
qa.openfoodsystem.com
boardconnector.groupe-seb.com
qual.qliksense.seb.com
*.wp.seb.com
account.rcu.seb.com
boardconnector-qual.groupe-seb.com
vpn.seb.com

Certificate

The complete raw certificate details for sebasiahress.seb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dhll/7sDXkCkJs9wINg
CU26edxrdFK/f/PMfr8vXxw/IB9CyLMW1kv0nMoWOSnsrAvm8WyUZcTRT1/9ChTI
6Hn5ms3SOO892jxjHKDDoLo/mIEgXsd5RQZg6KATjna1zMysvJ5FcYdl3zs4oq5G
RppaCqv7UpovVJQIvUlVDXgT5usEABTEUGZwB4KKhxMUO879ye9fUVF2NvAcoWAY
tQ4Ahz9p3KXpC9KleJi17KreHCFfy+0MklloBtzpHvvigxd/5XRk4usx/625iVNm
uv8UoPl6OBZhMjKQ85DsxCTLXmUK5F/ep+afyldzvGdOQfDRZo7rYkLsVItDXk5r
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34508509597942436428335282873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 11:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 11:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Auvergne-Rhône-Alpes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ecully'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SEB Developpement'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sebasiahress.seb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28305190635894327226517356819520868158709777658071246960722857839086439388183200008363397000403951335046747653721556817612454048181433074854542555834069702387202036640368613229865394703356128219688153328160000442646032743591116755927010314079210427678871714965436678698742860693913494048150806967914491916273817879190388736506774159345804271004745978390726655878079286594209800881609387859891059745392029692104461325741383938901999139805330751496467751691559609182102496551166872862990902059422359419546737131340804311386746445003133332380858109142727877764122282584115745042593669932323945958822924564969888177613721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebasiahress.seb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d26b881ab4a1c5cd99b1430191047ca056ebc3be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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