pressnsoft.fr
Issued by Gandi Standard SSL CA 2
About this certificate
This digital certificate with serial number 1e:63:35:a9:70:19:aa:4d:76:e9:d4:88:38:ec:d2:9d was issued on by Gandi.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage contains an inefficient encoding wherein the number of 'unused bits' is declared to be 5, but it should be 7. Raw Bytes: [3 2 5 128], Raw Binary: [00000011 00000010 00000101 10000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself defines that all trailing 0 bits be counted as being "unused". (Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 21.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pressnsoft.fr
Gandi
Organization:
Gandi
State / Province:
Paris
Locality: Paris
Country: FR
Locality: Paris
Country: FR
This certificate has expire since
Certificate Details
Serial Number (hex): 1e:63:35:a9:70:19:aa:4d:76:e9:d4:88:38:ec:d2:9dSerial Number (int): 40391965654504231048295261847698592413
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 79:41:2d:aa:5d:17:99:71:d2:6d:c4:1b:f1:f0:39:d6:7a:00:b3:32
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea
Fingerprint (sha1): f1:d4:e4:85:dd:dc:bb:c5:03:d0:cd:4a:62:45:1a:27:b4:25:42:73
Fingerprint (sha256): 78:21:ca:09:06:d6:88:fa:1c:32:65:85:15:cc:f0:86:6b:88:e3:3e:24:0a:fe:34:45:1a:8c:43:c4:47:81:c7
Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl
Check the revocation status for certificate pressnsoft.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pressnsoft.fr
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pressnsoft.fr
Other certificates including the domain name pressnsoft.fr
(limited to 100 certificates)
gatheringtoolstest.gtec.pro
pressnsoft.gtec.pro
gatheringtoolstest.gtec.pro
lemasdelentrecollines.com
forum-clients.eloquant.com
hotel-optimiser.gtec.pro
www.runrunmonkey.fr
pressnsoft.fr
www.cabinet-gtec.fr
beta.it-shaker.com
gtec.pro
www.pressnsoft.fr
rodacom.gtec.pro
gtec.pro
blog.wereport.io
rodacom.gtec.pro
www.blog.wereport.io
www.blog.wereport.io
blog.damaaas.com
pressnsoft.fr
www.cabinet-gtec.fr
tmm-software.gtec.pro
gtec.pro
www.la-relation-client.com
gtec.pro
www.runrunmonkey.fr
gatheringtools.gtec.pro
www.runrunmonkey.fr
www.runrunmonkey.fr
gtec.pro
pressnsoft.gtec.pro
www.masdelentrecollines.com
gatheringtools.gtec.pro
gatheringtoolstest.gtec.pro
www.runrunmonkey.fr
www.editeur-logiciel.com
oxio.fr
pressnsoft.gtec.pro
inspearit.gtec.pro
open-prod.gtec.pro
www.cabinet-gtec.fr
pressnsoft.gtec.pro
www.la-relation-client.com
www.blog.wereport.io
www.pressnsoft.fr
pressnsoft.gtec.pro
mautictest.gtec.pro
pressnsoft.gtec.pro
gatheringtoolstest.gtec.pro
lemasdelentrecollines.com
forum-clients.eloquant.com
hotel-optimiser.gtec.pro
www.runrunmonkey.fr
pressnsoft.fr
www.cabinet-gtec.fr
beta.it-shaker.com
gtec.pro
www.pressnsoft.fr
rodacom.gtec.pro
gtec.pro
blog.wereport.io
rodacom.gtec.pro
www.blog.wereport.io
www.blog.wereport.io
blog.damaaas.com
pressnsoft.fr
www.cabinet-gtec.fr
tmm-software.gtec.pro
gtec.pro
www.la-relation-client.com
gtec.pro
www.runrunmonkey.fr
gatheringtools.gtec.pro
www.runrunmonkey.fr
www.runrunmonkey.fr
gtec.pro
pressnsoft.gtec.pro
www.masdelentrecollines.com
gatheringtools.gtec.pro
gatheringtoolstest.gtec.pro
www.runrunmonkey.fr
www.editeur-logiciel.com
oxio.fr
pressnsoft.gtec.pro
inspearit.gtec.pro
open-prod.gtec.pro
www.cabinet-gtec.fr
pressnsoft.gtec.pro
www.la-relation-client.com
www.blog.wereport.io
www.pressnsoft.fr
pressnsoft.gtec.pro
mautictest.gtec.pro
Certificate
The complete raw certificate details for pressnsoft.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIQHmM1qXAZqk126dSIOOzSnTANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw HhcNMjExMjA4MDAwMDAwWhcNMjMwMTA3MjM1OTU5WjAYMRYwFAYDVQQDEw1wcmVz c25zb2Z0LmZyMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEoJ3jpvwyOxvwqGFW tbVjszaUcbIGwHi73/aEMTn+PSOMejJ1Qkj0FkRFB+1pv12KVsU3j3rXvBYQJkuv kFl7rqOCAyEwggMdMB8GA1UdIwQYMBaAFLOQp9jJr07NYTyffK1df0H9aTDqMB0G A1UdDgQWBBR5QS2qXReZcdJtxBvx8DnWegCzMjAOBgNVHQ8BAf8EBAMCBYAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0g BEQwQjA2BgsrBgEEAbIxAQICGjAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51 c2VydHJ1c3QuY29tMAgGBmeBDAECATBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8v Y3JsLnVzZXJ0cnVzdC5jb20vR2FuZGlTdGFuZGFyZFNTTENBMi5jcmwwcwYIKwYB BQUHAQEEZzBlMDwGCCsGAQUFBzAChjBodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20v R2FuZGlTdGFuZGFyZFNTTENBMi5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3Nw LnVzZXJ0cnVzdC5jb20wGAYDVR0RBBEwD4INcHJlc3Nuc29mdC5mcjCCAX0GCisG AQQB1nkCBAIEggFtBIIBaQFnAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG NOvcgooAAAF9l3KD+wAABAMARjBEAiBJkQun7rZGRWZqRvYJ1EUM62C9aThEhjnL YRzsLjBLowIgc3YpqzYOPe5gI7pjtw6Nrf/udJPswVuKFjvx5/SkCUIAdgB6MoxU 2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAX2XcoQEAAAEAwBHMEUCIQDW wzw6WSCZj9LQctwntkV0y/wvScSivnJSJD8WcS63wwIgZfiQBp96p1EmURIytU/X 9Q0EJVPNXSernJpNeilD/U4AdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9 bQa9bgAAAX2XcoPbAAAEAwBHMEUCIQDSG8sgC0nmPO46FQ+g44Sh6fx+SI2L6tPK CqbkRgzgIQIgM64msjG6qBrZC2x0N4kWOY4D1ShqGEJ4rDLA1rXPeBIwDQYJKoZI hvcNAQELBQADggEBAG4OTPa2SJQbkRWjKooaBm0K6D6HRGl2N6K58I5Y+i0zofFr WFYkK0qCOxe0O194hsPt5bYSZl3qJAhw3pyL202cLiS2Qo+2p6V2Xmqq9+BKQY0M 3uPE8MDpTk0pkyX71tYfXAieoIH1QBs7CqWBNHhtY2MsnLTpD030M0yVwAieDRBY +qCr5B+v4eBrvfVDVZnDV4i8tPCXxWueA8o12n3VbzaBp8LA/mEut1BwRPj5v/cp gAmG9eyRII9IfCANvuB1pZeTKFNHZEQY9ZtJoXKgvZS2+NR9dB5FtE3EslRDjUDT JAMVG69Yg0ebQRFssxsQddGtOJCREJWCsvljIZs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEoJ3jpvwyOxvwqGFWtbVjszaUcbIG wHi73/aEMTn+PSOMejJ1Qkj0FkRFB+1pv12KVsU3j3rXvBYQJkuvkFl7rg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 40391965654504231048295261847698592413 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pressnsoft.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004a09de3a6fc323b1bf0a86156b5b563b3369471b206c078bbdff6843139fe3d238c7a32754248f416444507ed69bf5d8a56c5378f7ad7bc1610264baf90597bae . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 79412daa5d179971d26dc41bf1f039d67a00b332 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 0580 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressnsoft.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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