green-connexions.gares-sncf.com

- SNCF -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 2f:22:75:c1:d4:1a:37:3f:c6:72:aa:69:e9:35:0a:9b:80:f5:c5:29 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SNCF

Organization: SNCF
Organization unit: 0002 808332670
State / Province: Seine-Saint-Denis
Locality: SAINT DENIS
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:22:75:c1:d4:1a:37:3f:c6:72:aa:69:e9:35:0a:9b:80:f5:c5:29
Serial Number (int): 269091049659353785925794244163868591920191489321
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: be:a8:af:d5:a8:12:3b:cd:1f:69:3d:4e:11:92:01:ea:ab:77:aa:1f
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 46:e6:28:94:71:91:61:70:a0:fb:3f:64:5e:77:3e:a0:dc:07:d4:23
Fingerprint (sha256): 7d:29:b7:ba:5d:b4:d5:c6:27:8a:26:48:d6:9a:ab:81:2e:a9:55:36:3e:a7:e6:ab:c1:be:f2:5d:90:2d:ea:8d

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate green-connexions.gares-sncf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for green-connexions.gares-sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

green-connexions.gares-sncf.com

Other certificates including the domain name gares-sncf.com

(limited to 100 certificates)
www.gares-sncf.com
survey.gradwell.com
*.sncfconnect.com
citybooster.gares-sncf.com
survey.westernwindowsystems.com
tenue-technigares.gares-sncf.com
supportsurvey.control4.com
autocars.gares-sncf.com
surveys.myarg.com
api.recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
surveys.fredmangroup.com
surrogate.omegafamilysurrogates.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com
soiree.gares-sncf.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
gares-sncf.com
*.sncfconnect.com
certificates.getfeedback.com
eval.bts.com
api.autocars.gares-sncf.com
survey.boomtownroi.com
citybooster.gares-sncf.com
feedback.wufoo.com
feedback.blackboardinsurance.com
challenge-open-beacon.gares-sncf.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
wifi-euro2016.gares-sncf.com
www.gares-sncf.com
supportsurvey.control4.com
feedback.liftago.com
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
customdomain.getfeedback.com
soiree.gares-sncf.com
survey.westernwindowsystems.com
survey.adstream.com
surveys.fredmangroup.com
mes-donnees.gares-sncf.com
feedback.auditorservice.com
wifi-euro2016.gares-sncf.com
tenue-technigares.gares-sncf.com
surveys.elkay.com
customdomain.getfeedback.com
feedback.nextdc.com
feedback.inap.com
feedback.auditorservice.com
autocars.gares-sncf.com
survey.gradwell.com
feedback.nextdc.com
citybooster.gares-sncf.com
certificates.getfeedback.com
autocars.gares-sncf.com
recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
feedback.qualityhosting.de
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
getfeedback.wire.com.au
certificates.getfeedback.com
feedback.smilebooth.com
cms.gares-sncf.com
api.autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
www.gare-sncf.com
cody-test.getgetfeedbackback.com
api.recette.autocars.gares-sncf.com
www.gares-sncf.com
recette.autocars.gares-sncf.com
autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
*.sncfconnect.com
green-connexions.gares-sncf.com
cityetconnexions.gares-sncf.com
feedback.nanotempertech.com
api.autocars.gares-sncf.com
soca-prod.gares-sncf.com
surveys.nextep.com
surveys.verisys.com
feedback.spscommerce.com
test-customdomain.getfeedback.com
citybooster.gares-sncf.com
test-customdomain.getfeedback.com
export-gsc.gares-sncf.com
ws1345.nkws1345-a.s10.netkin.io
*.sncfconnect.com
votreavis.gares-sncf.com
feedback.qualityhosting.de
enquete.pietervanforeest.nl
challenge-open-beacon.gares-sncf.com
export-gsc.gares-sncf.com
votreavis.gares-sncf.com
tenue-technigares.gares-sncf.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com

Certificate

The complete raw certificate details for green-connexions.gares-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09lfo+iSH52j61Iv3tox
r7hOHvwEj9fTxbj3NG8XU0DGAuhuN+EGowEOsFI9yPC5kj87zEomwOXI7sIwG/gU
KdrHVv4e9jIXl6vbAME4OR1M7ay2SPClOZ1DyMzwhjFtDZ0wChqCCF0LTKZYldLQ
mDJRNH+OCgIBej3gBz6nR2fTVWLDjVzDk+XXeqIV7wI2+yz8jQAn87bPFyhA1GDH
piD/cNra/KZRloApah+n7YY8vbKIahFgSiDApWqftnwWpSKHXrRjNv/DxZipX+ZD
mjgAHMSgDxwpTkY84vCsKn51Xl7NGQMVI6Zt4B2Xe9tWzAR7qafFc/phXTTGLEIf
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269091049659353785925794244163868591920191489321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 12:15:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-04 12:25:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seine-Saint-Denis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SAINT DENIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SNCF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 808332670'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'green-connexions.gares-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26743473262491842582353681187639127103478712960065030831827128268291983452423445009084086735068759404226674516834437670893113347016721553750027089090851103064367027584158120954305598833238773908890201478299425715920493414990258855082161754820646344480162635475944265798168436273159000967211145597304588189104002463412481734167692897976697755053592463872914589977997395453085845629862439009212638875729303829244101947117239443071016430032303462398565331650214342167933490461295957375012865988876842468308933102424435278140321827123914725356940452789736485352496805264774934335627072431807547400155166347719198539652903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-connexions.gares-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bea8afd5a8123bcd1f693d4e119201eaab77aa1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016d96bb12490000040300463044022054a44e384987d3f0745c4a17b8586fda02841b88365f2bae6a89478b8df69d2702202a97a4678acbcb380e805b8b0a13570ee2fbb24a278a83c1882e351863972613007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016d96bb123400000403004630440220646f50863f2a67e5452fffdde16283725599dace93547dee11a78ba4521e385f02204309ccb426e4c35eba8ec08ea67f3ebf2fe481280cfb38ba9ad0e0eb6725b1bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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