social.france24.com

- France Medias Monde -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 02:6c:41:71:6b:43:95:dc:fc:9f:b4:40 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

France Medias Monde

Organization: France Medias Monde
State / Province: Hauts-de-Seine
Locality: Issy-les-Moulineaux
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6c:41:71:6b:43:95:dc:fc:9f:b4:40
Serial Number (int): 749843054193723106297623616
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: b5:c0:23:74:45:0a:55:6f:95:f4:ef:f0:12:2f:0a:45:7c:d2:01:65
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 17:74:2d:f3:90:8b:ff:1f:53:0d:9a:ec:3b:6f:6c:09:b8:0b:f7:f0
Fingerprint (sha256): 7f:3a:c6:cf:0a:6a:89:c9:4f:0a:58:ec:8d:4d:e0:7f:e5:aa:89:42:8c:01:f0:90:52:74:1a:79:a8:3a:34:ac

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate social.france24.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for social.france24.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

social.france24.com

Other certificates including the domain name france24.com

(limited to 100 certificates)
www.france24.com
go.france24.com
my.france24.com
encrypted.france24.com
embed.france24.com
for.france24.com
for.france24.com
www.france24.com
login.france24.com
go.france24.com
for.france24.com
emailing.france24.com
for.france24.com
embed.france24.com
embed.france24.com
optiweb.ha.france24.com
embed.france24.com
www.france24.com
incapsula.com
go.france24.com
go.france24.com
hybrid.francemm.com
www.france24.com
for.france24.com
www.france24.com
tls.automattic.com
embed.france24.com
optiweb.ha.france24.com
www.france24.com
embed.france24.com
embed.france24.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
embed.france24.com
go.france24.com
for.france24.com
embed.france24.com
tls.automattic.com
form.observers.france24.com
tls.automattic.com
www.france24.com
embed.france24.com
login.france24.com
embed.france24.com
emailing.france24.com
webmail.france24.com
tls.automattic.com
tls.automattic.com
embed.france24.com
embed.france24.com
embed.france24.com
login.france24.com
login.france24.com
social.france24.com
www.frameworkconditioning.com
www.france24.com
www.france24.com
www.france24.com
tls.automattic.com
form.observers.france24.com
tls.automattic.com
tls.automattic.com
hybrid.francemm.com
test-rec.cloud.france24.com
embed.france24.com
embed.france24.com
login.france24.com
hybrid.francemm.com
embed.france24.com
tls.automattic.com
embed.france24.com
tls.automattic.com
social.france24.com
go.france24.com
tls.automattic.com
incapsula.com
embed.france24.com
www.france24.com
www.france24.com
tls.automattic.com
www.france24.com
francaconti.com
for.france24.com
embed.france24.com
optiweb.ha.france24.com
embed.france24.com
votecompass.france24.com
embed.france24.com
emailing.france24.com
embed.france24.com
incapsula.com
embed.france24.com
embed.france24.com
incapsula.com
for.france24.com
tls.automattic.com
embed.france24.com
for.france24.com
emailing.france24.com

Certificate

The complete raw certificate details for social.france24.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp1DwfzZ3NgsB7QY9VJi
kZ1wQyIF1eSd/OEJX8m80FNyNUzq4n7HC97YPMIFxag8UlJHifETR4ot6MHQ40eS
PSlueTDV3cRjvBFqdQi9OACCGkej+A19nkbaaQQQT87VxHuaZ4loNECRoDYCAzYG
ZiObiotfWqIP0V3hIYz1O0LCG/fwBWwiCmMUcg4qWQcdmSDkJfnHjSEQ3lpCRVXU
f/GTsCd3Bch+ciNlWUflYht7XwX/HPz0pFs57+1gI7qQBp6ZO2HaAEOxZj3HCft3
oIpUbGNBFRfHLwWMf83jn8LcLyEwK7/Spx4Tfuqxg+gvhvonxSQbvB/9SQdm12bm
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 749843054193723106297623616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 08:05:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-30 08:05:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts-de-Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issy-les-Moulineaux'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'France Medias Monde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'social.france24.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23052921607254803424478849910297982712392452058948461750178850714938212129621862045283985499401806341357680298016653022776643114335086174789826666286056092768023161043195534657131790935023372038040814452331970642666724884186079420433795468421992675978677818598769637240294588680485337262600574361773919990812611689454590326404894173752845520574309771339316785143464896107552468805592213694180560831970661889100905808185678323810155324661544487634710579710791218851108652433677625173644582329166875908602560273736190996481051700471421820858354640964605748322129173839978779253646704880413299790109462258527292476548787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.france24.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5c02374450a556f95f4eff0122f0a457cd20165
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016afd791b120000040300483046022100b3e524f3a10f07bc3b07bdb4f620059ca1bdf33e04e70ffb1bbc2e709e2a2b4c022100c6f775b09b3956c05064e529f62541e3709b7591be75a1a73cff2cdda2fd184e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afd791b620000040300483046022100b91203d7e4c1fcd35061988f2548c269934d1cae7990a012e4898563ea93f2a9022100f1e7414fb87a5bf8ac4a34eabbf91dc6052d86a8da7dff08e1c754801bae4f4a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016afd791e070000040300473045022100ed6d42de72127694e1682ad1436ed2e21cbc41c9c634750f4900b0110c8bbdb30220248e44fe41a2e849318a707bbed93de7d9adc24df59423037793182b2e8026160075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016afd791b360000040300463044022060dcff27774ab4d092c95e3cd754cae9067b36b44731aa797157c24d9b8a482b02207aa45966a2786665de2a0d84fafca48a9d1334e48a9275a146e4b2613a087a6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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