*.ada.fr

- A.D.A. SA -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:ce:46:eb:bd:ba:0c:fa:9b:ad:33:f8:ad:48:09:57 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

A.D.A. SA

Organization: A.D.A. SA
State / Province: Île-de-France
Locality: Clichy
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ce:46:eb:bd:ba:0c:fa:9b:ad:33:f8:ad:48:09:57
Serial Number (int): 21009471535639947404067430207054154071
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:5a:a1:46:f1:4b:1e:af:39:05:c7:6d:5e:bc:08:75:6e:8c:8f:3f
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 4d:ea:9d:df:f1:d0:1d:d9:04:c1:21:b1:f3:f8:e7:e4:bc:91:0c:a3
Fingerprint (sha256): 78:76:f5:85:ff:98:4c:cc:da:f5:3d:ed:79:b7:a2:6c:24:11:7f:ba:a5:b0:a1:09:f3:8f:73:39:04:97:fa:16

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.ada.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ada.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ada.fr
ada.fr

Other certificates including the domain name ada.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.ada.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21009471535639947404067430207054154071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Clichy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'A.D.A. SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ada.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768306077224766023937790769129944922756837473330793908433732182763938904878446992523157877462269246475891564891470094153393572995362373418771689424736443930846471150210464059852019813011182878565296483003673794396220311850523171297166158077852790464701754157855592852708793038111693747380721220694935430582548971693576047783100069721904385569337404845052430052010569156178013713042935022695945788940740729458838429028363423243804076524981659366481177924927466493020641995335741237982509356358496978810392930678034973590144807304706909998195243664359943880189905516863377075425678278609698867682667539369532136817747927799357005271050523721921382608029129753873247367141047735697132898765023041490375761722074919776599276241023630655814294969605775561860013337474395300313672182368449404687637221021414388925902684360173545356276015604214877777351419328906227343376055994225424144005278707353930540013924815857141736550412180726211250154555569095661613766900548240488969435988896773785363425736967717093057991166994260458831796607429529779583424733935203204281777365088700504280050014214886403305982462671369967824268774921327845455262758894635626886184077713303064353626124635362587523995369980751270069510400139400288946724862921397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a45aa146f14b1eaf3905c76d5ebc08756e8c8f3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ada.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ada.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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