connect-racco.erdfdistribution.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:27:1f:70:f7:4a:08:86:cd:8d:0e:c4:21:75:4d:fa:63:4f was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:27:1f:70:f7:4a:08:86:cd:8d:0e:c4:21:75:4d:fa:63:4f
Serial Number (int): 1494221665770578976335276053399974293693263
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: c5:49:0b:35:8c:4f:08:f4:1f:d2:ef:1e:a2:9c:ff:09:ec:88:33:14
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 84:e9:2e:d5:44:a2:2c:35:1b:49:38:6c:d3:c7:c0:58:78:dc:78:4f
Fingerprint (sha256): 6e:c3:c7:95:6d:31:a3:bb:f5:1f:97:9c:ac:2d:6d:11:eb:2f:af:5a:4c:9a:59:eb:4d:d5:15:fe:9e:7a:59:02


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate connect-racco.erdfdistribution.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect-racco.erdfdistribution.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect-racco.erdfdistribution.fr

Other certificates including the domain name erdfdistribution.fr

(limited to 100 certificates)
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
colloc2.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
ccd.erdfdistribution.fr
portail-osr-prestataires.enedis.fr
enedis.fr
brandcenter.enedis.fr
relevermoncompteur.erdfdistribution.fr
deploik.sid.erdfdistribution.fr
colloc.erdfdistribution.fr
perm.erdfdistribution.fr
perm.erdfdistribution.fr
enedis.fr
noedmzplywfe001.intranet.edf.com
enedis.fr
pilotin-dev.erdfdistribution.fr
herakles.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
fournisseursderdf.erdfdistribution.fr
distri-pictrel.edf.fr
colloc.erdfdistribution.fr
perm.enedis.fr
relevermoncompteur.erdfdistribution.fr
prac-pre-prod-internet.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
etoile-rh.edf.fr
portail-osr-prestataires.erdfdistribution.fr
brandcenter.enedis.fr
perm.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
connect-racco.erdfdistribution.fr
ccdsecours.erdfdistribution.fr
perm.erdfdistribution.fr
srk.pprd.sid.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
pcydmzplywfe001.intranet.edf.com
distri-pictrel.edf.fr
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
herakles.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc-perf.erdfdistribution.fr
ccd.erdfdistribution.fr
herakles.erdfdistribution.fr
brandcenter.enedis.fr
ccdsecours.erdfdistribution.fr
PCYINTPLYPFE001.neoprod.edf.fr
brandcenter.enedis.fr
relevermoncompteur.enedis.fr
pcydmzplywfe001.intranet.edf.com
perm.erdfdistribution.fr
perm.erdfdistribution.fr
connect-racco.enedis.fr
portail-osr-prestataires.erdfdistribution.fr
mediabox.erdfdistribution.fr
herakles-pp.erdfdistribution.fr
brandcenter.enedis.fr
pcydmzplywfe002.intranet.edf.com
relevermoncompteur.erdfdistribution.fr
brandcenter.enedis.fr
portail-osr-prestataires.enedis.fr
cko-osb-recf.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
enedis.fr
connect-racco.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
colloc.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
noedmzplywdi001.intranet.edf.com
noedmzplywfe001.intranet.edf.com
www.erdfdistribution.fr
noedmzplywfe002.intranet.edf.com
etoile-rh.edf.fr
deploic.sid.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
connect-racco.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
pcydmzplywfe001.intranet.edf.com
rh-planete-formation.edf.fr
herakles.erdfdistribution.fr

Certificate

The complete raw certificate details for connect-racco.erdfdistribution.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDMif2SR3ePrPUYjenW4
kxV6yP+3r/WH7LnDufmR85TAJp8/SjYqiX8OU+ZkIOSbSPmAj0oRKlQ/UTaSYV+S
H8K8jw0muzAzfmyCpvqGbBbn0O8OTAhXYeixsv+XmreGle7FfWvK8BVzUxPCTlWE
w5NPyRi6I0bxtWnXuURczsTMlwDprNpYwzOUMriojLnnOHqJkGIPMFPkOyujeq/j
W0XblOYGJkfpyo9/+QMAJ3hYFueTXLXU7nOevq0ZDDg+HewKB6ZfTngEEd3Ca/uF
526v2jQdSxoCyEoifWVXZLgcDiv0VC0tuVP8E+LnycxzBGn6cd5b3Bq0mZcp4A0S
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494221665770578976335276053399974293693263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-16 15:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-17 15:07:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect-racco.erdfdistribution.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20728297502589158128771442592707500751095088709079124781560785785346551844010969197088825354830942482451055973497510167559444808878693020718840134200083890647690420352552227921344573945954469788908491473346450801311502723949171983246893586322513000863450058094159292719647956253713653171644790642343577014701428935874217343095317525510171992563319931025205534633843170733676598743277700257784451471834013113979324313499199395586164529525530731817474080130797149394763825496141427567288113233139725664955316766313475737965533016571741187108478528235454371572005097085354922226968976888821452926450870419881261758485141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect-racco.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5490b358c4f08f41fd2ef1ea29cff09ec883314
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006269611a51ee8c722f45f6c8caafca80195af1188ad100be6c01cb61080d6aa2822d978ec6f6d43dde6b01f497269e8d52195bb08b40aca42763644d09e80babeb472cafac792d6afada48d2324922cbdf25ce4653e45a9e9f4fb024cea58cc6384e023f5a1a4bad3226c675a84c8c4b2e815dd8e2999762fc4bf229b2916f3047c74012875debb58070fae95829b76734e7b8b1bb4daaa4cb03ab3b57992b55d33dbe79856ab94453870ab1851675aec3fa710a6133a191e2448677f510d8d209073eb725018f29efd936c7ef335709a4a97d375cb16a10a639cdd45356f7b6d39ee3581d529a685181569cb2228c1e175959b57571e55b8c0193dc2dfa2522