herakles-iq.erdfdistribution.fr

- ELECTRICITE DE FRANCE -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 3f:04:6f:b7:9f:6c:d4:2d:ae:f6:5d:1c:d6:e4:e1:ab was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

ELECTRICITE DE FRANCE

Organization: ELECTRICITE DE FRANCE
State / Province: PARIS
Locality: PARIS
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:04:6f:b7:9f:6c:d4:2d:ae:f6:5d:1c:d6:e4:e1:ab
Serial Number (int): 83764398817443267283762268691553903019
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): 43:95:b2:d6:39:0d:8a:56:d2:bb:eb:e8:34:65:f3:07:85:b2:96:37
Fingerprint (sha256): 6c:fa:d1:49:d6:a9:22:86:f8:58:17:3c:92:f4:5c:f2:64:18:57:e5:63:2f:15:28:a4:31:26:bb:e8:1d:99:fc

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate herakles-iq.erdfdistribution.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for herakles-iq.erdfdistribution.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

herakles-iq.erdfdistribution.fr

Other certificates including the domain name erdfdistribution.fr

(limited to 100 certificates)
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
colloc2.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
ccd.erdfdistribution.fr
portail-osr-prestataires.enedis.fr
enedis.fr
brandcenter.enedis.fr
relevermoncompteur.erdfdistribution.fr
deploik.sid.erdfdistribution.fr
colloc.erdfdistribution.fr
perm.erdfdistribution.fr
perm.erdfdistribution.fr
enedis.fr
noedmzplywfe001.intranet.edf.com
enedis.fr
pilotin-dev.erdfdistribution.fr
herakles.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
fournisseursderdf.erdfdistribution.fr
distri-pictrel.edf.fr
colloc.erdfdistribution.fr
perm.enedis.fr
relevermoncompteur.erdfdistribution.fr
prac-pre-prod-internet.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
etoile-rh.edf.fr
portail-osr-prestataires.erdfdistribution.fr
brandcenter.enedis.fr
perm.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
connect-racco.erdfdistribution.fr
ccdsecours.erdfdistribution.fr
perm.erdfdistribution.fr
srk.pprd.sid.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
pcydmzplywfe001.intranet.edf.com
distri-pictrel.edf.fr
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
herakles.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc-perf.erdfdistribution.fr
ccd.erdfdistribution.fr
herakles.erdfdistribution.fr
brandcenter.enedis.fr
ccdsecours.erdfdistribution.fr
PCYINTPLYPFE001.neoprod.edf.fr
brandcenter.enedis.fr
relevermoncompteur.enedis.fr
pcydmzplywfe001.intranet.edf.com
perm.erdfdistribution.fr
perm.erdfdistribution.fr
connect-racco.enedis.fr
portail-osr-prestataires.erdfdistribution.fr
mediabox.erdfdistribution.fr
herakles-pp.erdfdistribution.fr
brandcenter.enedis.fr
pcydmzplywfe002.intranet.edf.com
relevermoncompteur.erdfdistribution.fr
brandcenter.enedis.fr
portail-osr-prestataires.enedis.fr
cko-osb-recf.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
enedis.fr
connect-racco.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
colloc.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
noedmzplywdi001.intranet.edf.com
noedmzplywfe001.intranet.edf.com
www.erdfdistribution.fr
noedmzplywfe002.intranet.edf.com
etoile-rh.edf.fr
deploic.sid.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
connect-racco.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
pcydmzplywfe001.intranet.edf.com
rh-planete-formation.edf.fr
herakles.erdfdistribution.fr

Certificate

The complete raw certificate details for herakles-iq.erdfdistribution.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscpXmqNeR2KRwsnsCS+D
mtVKqCH7CFG+lXxTx0fY4L0GGgcDZvVCoKiDiOAQHGznToA4+HAHXd5gxLZUyMmb
iG+EUJapV9E2/dks3R3vc5yk2lY4hUHmK7q7RDDuXcedN5Jx6fteX1MDtc7OxtuF
X6vaZYKVtDne5aNAVXpAqidcTNGbseCRDVLp8biFzSLmIvcy5LbODS9qjyxhGk9y
NXfxJaAoewc8aO3YWNR5Vinyn/ZmNeDxh85vWB59JlUHb/WrLwKb3Y/R8Rp9HBoN
asJQSPjbaRQ4hE9Z47P4EpU66yQBVGizwfLCugctqndaOGI8xyoca1WlGoDp8+D6
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83764398817443267283762268691553903019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ELECTRICITE DE FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'herakles-iq.erdfdistribution.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22443958638261393326114226478279759530750992590929262687571506162385190375288699001250388466972679960554770403061125474487888592051950248172254514482859681778340260940864954396028921251018040661112066361838738242138864119846761660310592397279230331612961623922705706270024829157009478089166890304296632049843109029645136039970208789650400404037726713749328031978032944707427859536860603657125621861750995629062028963670910373831766478324490815520253085499794023759218643845433009852199682253770612648516424721258872318965861264403897152837775890170508255656401316747245559376455626797297928583537149794237518442461721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herakles-iq.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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