expert.macif.fr

- MACIF -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:ce:a1:cb:f0:10:df:37:ed:d3:cd:ac:6c:66:d9:75 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MACIF

Organization: MACIF
Organization unit: IT
State / Province: Deux-Sevres
Locality: NIORT
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:a1:cb:f0:10:df:37:ed:d3:cd:ac:6c:66:d9:75
Serial Number (int): 5060578765772899714458012114701703541
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 09:e4:49:98:f8:cd:d9:87:ad:44:90:33:64:91:b0:02:4d:d5:8c:2d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 1c:f4:40:16:8f:c1:a2:8c:a7:52:77:18:c2:64:b5:91:e4:1d:07:63
Fingerprint (sha256): 59:08:c5:0a:d4:79:91:bc:61:f6:ac:48:d8:f5:57:38:3f:db:ee:d7:97:d7:8f:5a:b2:38:a0:7f:ed:27:2a:a2

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate expert.macif.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expert.macif.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expert.macif.fr

Other certificates including the domain name macif.fr

(limited to 100 certificates)
www.macifevasions.macif.fr
jevote.macif.fr
jeparticipe.macif.fr
fisso-sp.macif.fr
messervices.macif.fr
communaute-auto.macif.fr
atelier.macif.fr
actualites.wiztopic.com
fisso-hub.macif.fr
atelier.macif.fr
signatureelectronique.macif.fr
actualites.wiztopic.com
www.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
emmcentre-rec.macif.fr
faq.macif.fr
mailhost.macif.fr
fisso-inter-vip.preprod.macif.fr
www.macifevasions.macif.fr
presse.macif.fr
sosg.macif.fr
mcs.macif.fr
servicesweb.macif.fr
atelier.macif.fr
connect.macif.fr
*.macif.fr
agence.macif.fr
actualites.wiztopic.com
atelier.macif.fr
agence.macif.fr
atelier.macif.fr
mcs.macif.fr
actualites.wiztopic.com
actualites.wiztopic.com
toad.macif.fr
toad.macif.fr
www.macifevasions.macif.fr
www.macif.fr
espacegandreck.macif.fr
www.brandcenter.macif.fr
www.macif.fr
preprod-presse.macif.fr
nvmp1815.macif.fr
www.ceidf.macif.fr
device.macif.fr
evenements.macif.fr
www.rsvm.macif.fr
www.macif.fr
presse.macif.fr
actualites.wiztopic.com
atelier.macif.fr
atelier.macif.fr
cds.macif.fr
communaute-auto.macif.fr
lessentiel.macif.fr
actualites.wiztopic.com
de.newsletter.events.renault.com
nvmp1816.macif.fr
as.macif.fr
as.macif.fr
actualites.wiztopic.com
ee.macif.fr
*.recette.macif.fr
rendezvousbrisdeglace-rec.macif.fr
gw.visio.vt.macif.fr
toad.macif.fr
satisfaction.macif.fr
agence.macif.fr
actualites.wiztopic.com
as.macif.fr
agence.macif.fr
pdtv.macif.fr
pca.macif.fr
lessentiel.macif.fr
www.macifevasions.macif.fr
jevote.macif.fr
www.macif.fr
satisfaction.macif.fr
expert.macif.fr
fisso-hub.macif.fr
signatureelectronique.macif.fr
signatureelectronique.macif.fr
i-reliure.macif.fr
as.macif.fr
jevote.macif.fr
rendezvousbrisdeglace.macif.fr
expert.macif.fr
messervices.macif.fr
presse.macif.fr
actualites.wiztopic.com
www.ceidf.macif.fr
as.macif.fr
atelier.macif.fr
evenements.macif.fr
expert.macif.fr
gestionsante.macif.fr
messervices.macif.fr
www.macif.fr
communaute-auto.macif.fr

Certificate

The complete raw certificate details for expert.macif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5060578765772899714458012114701703541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deux-Sevres'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NIORT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MACIF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expert.macif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917668265432247344370803289773517246423929099017633456992405858179339297019184023336282767848213942293104054854981117456564010787733711922838159083386857272443166953348696877833502508548014900440106902087812875314180670446566631956337285408918225047518907961108057580267279108073834844696280358866810139582012201622061442782002600714237845020823517940311584026428584132499018031817684708546497520791690928551959747756214346719485031065484346472173057081012941145147859683492102846355127320458827812857514739044221612385972615594617773563989706277632080727279756953765840611785852783816810402549861511168187357281527854771901141444353636182709377012988201902864925936040899084714625404173844397507084361086970113137102516598935542796652905804184757328752113776841443419574917304410523962332692154784985922777971354804806020874165164129247598269239119381377469279923363602013973116877282793281802422659869385451185988115115268908729871102535283071700569854957377406199147448603303682532325087631750071198247480919266470757369258377278229850716528570625828290206722209603659444691820745059619359532040815838671494661679260093778705128520778374793473792964247811067893434501023682179667994837735620467198757063312062332195965099796657759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09e44998f8cdd987ad4490336491b0024dd58c2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expert.macif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a2529427a0000040300483046022100bb211430e46a11ae6c4d9cdba7b37049498814c41a698b711c3b61957b6abd0f0221009bed080a08d69d502bf37776ec8516cfd9997556034efc57d85252a1cbe79a940076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a252943900000040300473045022100d85aa6f3614c1a00b2efa636f0809543362a41368d5c047f40bcd1f2d6b98aff022077f72d0f69a477d83fb24ca65f641550a1fe687f1efb530fcde1641fac7d1690
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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