*.wedia-group.com

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number e0:4a:1d:33:69:27:84:3c:8a:ec:9f:87:d3:a6:47:8f was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.wedia-group.com

Gandi

Organization: Gandi
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): e0:4a:1d:33:69:27:84:3c:8a:ec:9f:87:d3:a6:47:8f
Serial Number (int): 298131893286411225508284687419303151503
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0c:ee:fb:2d:3c:ff:d0:f2:0a:90:39:39:44:3a:1f:00:9e:32:7a:19
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): d0:48:27:32:81:42:3a:3e:a8:84:7a:df:ae:c7:11:00:bf:35:76:d5
Fingerprint (sha256): 69:08:c0:63:3f:b3:91:86:45:8f:87:7d:6b:1d:b2:01:26:06:d0:a3:d8:c7:41:68:d5:20:7a:ba:11:86:49:47

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.wedia-group.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wedia-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wedia-group.com
wedia-group.com

Other certificates including the domain name wedia-group.com

(limited to 100 certificates)
go.wedia-group.com
sl.wedia-group.com
www.wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
copper.wedia-group.com
wedia-group.com
sl.wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
copper.wedia-group.com
*.wedia-group.com
copper.wedia-group.com
wedia-group.com
copper.wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
sl.wedia-group.com
copper.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
brandcenter.enedis.fr
bases-alienor.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.prapixl.wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
copper.wedia-group.com
go.wedia-group.com
renault-trucks-pp.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
bases-alienor.wedia-group.com
bases.alienor.org
wedia-group.com
wedia-group.com
brandcenter.enedis.fr
wedia-group.com
bases-alienor.wedia-group.com
bases-alienor.wedia-group.com
brandcenter.enedis.fr
wedia-group.com
casa-test.wedia-group.com
wedia-group.com
engie-servicesv2-cdn.wedia-group.com
www.vaillant-germany-stage.wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
wedia-group.com
wedia-group.com
teampass.ibrams.com
wedia-group.com
wedia-group.com
wedia-group.com
go.wedia-group.com
wedia-group.com
wedia-group.com
wedia-group.com
*.wedia-group.com
mediabox.erdfdistribution.fr
go.wedia-group.com
brandcenter.enedis.fr
wedia-group.com

Certificate

The complete raw certificate details for *.wedia-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOaOe0qVFBslHXS4oo6u
toA6H9bcfZ+TlizdtcnucmJaJrz6VPqNplsbdjgieLcfsupgpaqqI6SoeUz2Umu9
bSOimIu0wlrR+COCKX8I3XJQcc1JbbKSkNKP5RCD+rOkPKAoxt9J485wUg5HCHc/
PQP4hw8jXcVxSttjnn+rlOgNHjQcTcpciGWt1za1Quk0XH1s9f+/oegBJTzdvpMR
ubsQDYSgWPsrqzhv0j9O4YS4Rgg/SYc8sZ0z6BZm46Ng3hoC9b017/6CRI6cxwoF
XcdpNYUJYBJTCX8FHMzeLto8kMXwgqI5Ap5JGOQfsqWBejd1UJAEfFLPSJ3aRd0c
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298131893286411225508284687419303151503
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wedia-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18796960816387367280687344599482122979116034931484514604833167054153128832956313835711198896092892459163934798341446013006693482159047318553247688240690062614432377261696655665979249100178908813679290675803567390242328172708632286989751500349523503414590836295460344222253468171624904718978971197585287759002124977923142621808562575541833646513502865157103490345108519558344644393009569813248315059895295117153565076316466947208384200517639218124485755911454774500123407326720015697695845002566111432526761563763375355275592451202026104469154527058657992263334080925145969923962157119341052013034909299727676271828071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ceefb2d3cffd0f20a903939443a1f009e327a19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedia-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedia-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		00406a4d79397ff61b85b21acf57c3469a16c3e9a6f253068ca71c68b67c9b80c5d14a7cb80dc0c39d0ac98952cf7cc9f63716f5de551d80cca29aee4d7a3a79708f0cb7582bb214a6952952461ac9112e15951024484cd1ec7dcfbf7cb63da76bdcc5687d92c5eb3e272246f0a286cfbf0eeecad96526e4e048cbdc4768657ba537f5bcbaebd93b6dd707e46471ead3b8c5542339b40ccc20724eb77d77985a8ddc07be45ae9a5b64b8a625ae806bbdb881aa35b4f10e49dfecbf892a4ef43f83c9ec016b5115bbffb9930844fb4ded0695e2b23dd5439958022485b2f019bb4b218039f37e09f988d9ac32c62cb6fea1b76729cc718d308834144f26559444849f02bfc56b5db187d6b5daa76ad8ec6dfd11d2dda852ea3e70a4c1ccedfe12a612bac6b2d8a2d18ac3f1e50a7e06fbb3b5952d3f9a9dc459fa940c317efa125586acb0fbcc14e8704350d9756e9a28afb3ef260e44257c7a0efcced0efc49044c5373d07706928154add00004bd694da65930a19ef915fe6375f0b465dc17585