cityetconnexions.gares-sncf.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 3c:f0:5c:72:22:ec:45:a5:b7:ab:c4:bd:4e:6a:f4:7b was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=cityetconnexions.gares-sncf.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:f0:5c:72:22:ec:45:a5:b7:ab:c4:bd:4e:6a:f4:7b
Serial Number (int): 81001706017645499312478994783732954235
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 5a:47:51:41:62:0d:95:82:e1:6d:31:15:12:8e:75:11:3a:7f:51:fa
Fingerprint (sha256): 81:8e:af:a3:77:78:67:44:70:9a:14:1a:45:d3:99:c2:fa:6f:31:d5:2e:ef:62:56:0a:23:eb:8f:f8:3f:e6:8e

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate cityetconnexions.gares-sncf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cityetconnexions.gares-sncf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cityetconnexions.gares-sncf.com

Other certificates including the domain name gares-sncf.com

(limited to 100 certificates)
www.gares-sncf.com
survey.gradwell.com
*.sncfconnect.com
citybooster.gares-sncf.com
survey.westernwindowsystems.com
tenue-technigares.gares-sncf.com
supportsurvey.control4.com
autocars.gares-sncf.com
surveys.myarg.com
api.recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
surveys.fredmangroup.com
surrogate.omegafamilysurrogates.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com
soiree.gares-sncf.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
gares-sncf.com
*.sncfconnect.com
certificates.getfeedback.com
eval.bts.com
api.autocars.gares-sncf.com
survey.boomtownroi.com
citybooster.gares-sncf.com
feedback.wufoo.com
feedback.blackboardinsurance.com
challenge-open-beacon.gares-sncf.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
wifi-euro2016.gares-sncf.com
www.gares-sncf.com
supportsurvey.control4.com
feedback.liftago.com
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
customdomain.getfeedback.com
soiree.gares-sncf.com
survey.westernwindowsystems.com
survey.adstream.com
surveys.fredmangroup.com
mes-donnees.gares-sncf.com
feedback.auditorservice.com
wifi-euro2016.gares-sncf.com
tenue-technigares.gares-sncf.com
surveys.elkay.com
customdomain.getfeedback.com
feedback.nextdc.com
feedback.inap.com
feedback.auditorservice.com
autocars.gares-sncf.com
survey.gradwell.com
feedback.nextdc.com
citybooster.gares-sncf.com
certificates.getfeedback.com
autocars.gares-sncf.com
recette.autocars.gares-sncf.com
citybooster.gares-sncf.com
feedback.qualityhosting.de
challenge-open-beacon.gares-sncf.com
feedback.nanotempertech.com
getfeedback.wire.com.au
certificates.getfeedback.com
feedback.smilebooth.com
cms.gares-sncf.com
api.autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
www.gare-sncf.com
cody-test.getgetfeedbackback.com
api.recette.autocars.gares-sncf.com
www.gares-sncf.com
recette.autocars.gares-sncf.com
autocars.gares-sncf.com
ws1031.nkws1031-a.s7.netkin.io
citybooster.gares-sncf.com
*.sncfconnect.com
green-connexions.gares-sncf.com
cityetconnexions.gares-sncf.com
feedback.nanotempertech.com
api.autocars.gares-sncf.com
soca-prod.gares-sncf.com
surveys.nextep.com
surveys.verisys.com
feedback.spscommerce.com
test-customdomain.getfeedback.com
citybooster.gares-sncf.com
test-customdomain.getfeedback.com
export-gsc.gares-sncf.com
ws1345.nkws1345-a.s10.netkin.io
*.sncfconnect.com
votreavis.gares-sncf.com
feedback.qualityhosting.de
enquete.pietervanforeest.nl
challenge-open-beacon.gares-sncf.com
export-gsc.gares-sncf.com
votreavis.gares-sncf.com
tenue-technigares.gares-sncf.com
challenge-open-beacon.gares-sncf.com
www.gare-sncf.com

Certificate

The complete raw certificate details for cityetconnexions.gares-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81001706017645499312478994783732954235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cityetconnexions.gares-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855509348745041582892855954531109973425056523034317716123002647192352600111452439695456682935435591811048618791531733593710905380913057022387060238069410593965565776843668460047801129867284038135689640935326930646639799719908541971648789257073187862935683457465927796475623211250585547405333783628600087197530898018157674563049797911809103385849698143675335109740663403184297968438096024389858534260710151083207989444305285916342605761476944346162978695629525434148420415092377497948161687532728917901241045940190236425459495614096673918057536295265665246110746672205327801302378094775676827346106247060672403011699131792642742332119129752581252470308188505047868381421729523391076179993481717943854012783382171150083343459318014337083703732441411516832103543961204494606384278492028348291553295389139374649748409714122603959005834609510800336843926886909107970245732375545309092971527055276849103899529992617216075977057927672293193291973398257949550604348146045195948404800358956310348196759566132612958742934551867674456221989307397257151659680706121969114408067996428323045321714853052480828332350145005541598448370825141088938922847722343229132209944368233241432359056830037613508886275416763489894094241352156613846465108456923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityetconnexions.gares-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000155307c2dad00000403004730450221008567613d6828081d5ec30697f13b2c79f1b91530ed384dbb551354a450d45204022025dea78e6bc7a9cdd28f9d639086cf3a3927dc13b4dc1eff09e03986ecb67497007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155307c2e1b000004030046304402204d79dff7c6daea39ad361fb02c407aa86ae80f5dd7ae42361fdb7286bf572e4402201bb641ae4ebb4172c16c3dc88282697a441c754227e560b52c27d9609044aa3c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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