*.sncfconnect.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:d2:8b:ba:2a:2f:4d:79:6a:52:ff:9a:73:a9:cd:52 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sncfconnect.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d2:8b:ba:2a:2f:4d:79:6a:52:ff:9a:73:a9:cd:52
Serial Number (int): 13056268306785247681436450132893224274
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a7:38:a2:71:5c:0d:34:f3:e6:70:ac:9c:33:4e:6a:22:a8:dc:ee:73
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 23:50:31:48:f9:f0:42:25:37:d1:a6:9e:fa:1d:3f:0f:1c:2f:90:59
Fingerprint (sha256): 7c:a1:52:1b:fe:75:59:62:75:3a:f4:2c:19:f0:7c:9e:58:53:1a:e0:e3:9b:84:c7:c8:1d:91:c2:7f:38:5a:fd

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.sncfconnect.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sncfconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sncfconnect.com
*.gares-sncf.com
www.accessibilite.sncf.com
gares-sncf.com

Other certificates including the domain name sncfconnect.com

(limited to 100 certificates)
*.sncfconnect.com
sncfconnect.com
sncf.com
sncf.com
mail.sncfconnect.com
www.srtpf.fr
*.sncfconnect.com
sncfconnect.com
sncf.com
www.srtpf.fr
nl-cdn.sncfconnect.com
res2.service.sncfconnect.com
ntf.sncfconnect.com
sncfconnect.com
sncf.com
ouisncf.fr
mail.sncfconnect.com
sncfconnect.com
www.srtpf.fr
*.sncfconnect.com
sncfconnect.com
*.sncfconnect.com
sncf.com
www.srtpf.fr
nl-cdn.sncfconnect.com
sncfconnect.com
*.sncfconnect.com
sncf.com
www.srtpf.fr
sncf.com
sncf.com

Certificate

The complete raw certificate details for *.sncfconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gY8OE/bYbo8X0PBSTL0
Cao5vZHYfnTRS3HVPqrgSkauB/PtTEW1zOuh6uojhdvVwsX+bVueGvNvgRq6or8o
5JOXmBsrr5Sa2SdXw4rsJ6iGZMDc6pcZ6XvA0TdqT/cvfdCIxK3KBAqWNdSoaQeK
/Zmmy2AqSkJ/iQrRBknZPSBB7YdFPdFJMUt4J6J/C0bwjhKmFAJ0g20eusCZneaE
m2WMv0X1UVpJf2GKvMOSs7tnoOF+uh6KuRCFb0J9sGWdJE9pTXr23c8NZVXYmT6c
9wURhx/r4xj1Keui6svHf4wwoAd3qgeFldMOi8Nvnhklta8gtdbI06NKjI/72+WI
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13056268306785247681436450132893224274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sncfconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27018071971342181827255858128859575396935271321887270377513996186953271933666685032578260499314845677072103045923575662667108673294507324462306822014548762788216535150497701456135876512335459596726509232019337789325889122538397403367184815071898458242576300143240087711252379434348473829582796726975328538889974597619231480320031847644581750572602768459259996159016708960286125269973428774885190855235032842391092775565713728630871999401139428265043008425872457932927157237576561150637326874985378338624849158168464511568519584562325855743261011230692171359605672893396398745336900329937646366118202244013624677206151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a738a2715c0d34f3e670ac9c334e6a22a8dcee73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sncfconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gares-sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessibilite.sncf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gares-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001852ef9c6930000040300483046022100da43d6ff7046048f631f2d68c191a4438a06aa7ab18a9ce33ff4ea451d55cd3c0221009bb36bfc7e7c4ace20d46b08549ae114ccc1537f364635ec5513424c398db6eb00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001852ef9c7090000040300473045022100ed91178982ae522665985d95d076a0fa6dcf393f8bd7ff4b804dfe07b8bc1d3a02200b0b265a57bf0783aaa8f0a72e3c7a47cbef0da9579dea3d91d2c1271d3c867300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001852ef9c685000004030047304502204cee947adda11db5743b1776e5bf848dd2ebf66a12610f1d39843adacd283ba1022100e0c063a2272c6e7cb220e997f607f292e74faf4d176191696ae74e8378da5d41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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