*.astre.fr

- ASSOCIATION DES TRANSPORTEURS EUROPEENS -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 12:a1:f7:3f:07:51:32:d9:77:32:c3:68 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASSOCIATION DES TRANSPORTEURS EUROPEENS

Organization: ASSOCIATION DES TRANSPORTEURS EUROPEENS
State / Province: Île-de-France
Locality: Le Plessis-Pâté
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 12:a1:f7:3f:07:51:32:d9:77:32:c3:68
Serial Number (int): 5766534820935570521211454312
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 6c:b0:85:9a:c9:3b:47:f7:e1:fa:84:c6:dc:b6:db:83:81:f5:0a:fb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 12:66:77:41:73:6b:1a:e1:61:b2:37:58:c9:24:05:20:89:d4:1a:3b
Fingerprint (sha256): 81:5b:ee:75:09:e6:ba:6b:ac:9f:83:05:03:51:1f:72:32:6e:10:fb:68:51:c8:da:5f:0c:03:5b:40:02:f2:1a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.astre.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.astre.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.astre.fr
astre.fr

Other certificates including the domain name astre.fr

(limited to 100 certificates)
academie.astre.fr
captushost.com
captushost.com
captushost.com
captushost.com
www.etherity.org
demo.mirrori.co
captushost.com
www.galicier.fr
rojnew.com
www.butsuryu-ukeoi.com
captushost.com
*.astre.fr
captushost.com
captushost.com
www.samani.ai
captushost.com
captushost.com
captushost.com
captushost.com
captushost.com
dev.sportscards.io
captushost.com
*.astre.fr
captushost.com
captushost.com
captushost.com
captushost.com
admin1232.estore.business
captushost.com
*.astre.fr
captushost.com
captushost.com
captushost.com
captushost.com
captushost.com
harra.swiftally.app
captushost.com
yosai.turnosweb.app
captushost.com
captushost.com
lasemainegourmande.com
parking.astre.fr
galicier.fr
www.humacit.com
captushost.com
renpoint.com
captushost.com
www.stockrepublic.fi
captushost.com
captushost.com
captushost.com
captushost.com
captushost.com
captushost.com
captushost.com

Certificate

The complete raw certificate details for *.astre.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5766534820935570521211454312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 14:20:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-02 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Plessis-Pâté'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASSOCIATION DES TRANSPORTEURS EUROPEENS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.astre.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721866144999188045473616498097938120596979363685681204533489197751411628006710379195477694920543463219084311119396514363721061828016230972754621328992310025915469465730810454361932196761688411046570818489428813246494938185123999101118222775935241329525148016998538772661758382349191735102201451299014696743023003450955660841359662597601624052164556597557676395207050992058334219783363359664526062233360478742773098223688053867949270647443887191302406030297993315821867167114163991427842352077484275219194969884482538305562695775404701099975267747848355195648612564151919765541209069748061483032654475654981831733537038469092427998114814599292091640434472476734418065134872459323008742952239732317127692929924013641677969286274453158442599464405581227585151488845731711808846859699957911589025794118214275718536214958893690748519790592407139567278880495818666146061697461496307230733199485681502025693340925806816839933007671441609417366420082735529843680792699494973015880163679579295761806918507759844199478124822015931343262856484014609706638771116294881403464298099080986856089718451421535730399480470455760838022662681878057370139088081010862982651871986369989479947286032484238194359641882642220442431576589004119727262671716299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astre.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cb0859ac93b47f7e1fa84c6dcb6db8381f50afb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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