k.yves-rocher.fr

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 30:1b:88:dd:c0:c0:7f:4d:ae:b3:df:b5 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
State / Province: Morbihan
Locality: La Gacilly
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 30:1b:88:dd:c0:c0:7f:4d:ae:b3:df:b5
Serial Number (int): 14888567801015510070497370037
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: f2:62:10:2d:ea:63:c6:17:b0:de:db:8e:c6:2a:af:f8:63:31:59:27
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): a7:a2:f5:69:05:15:4d:2e:c4:0d:c3:34:49:1a:f3:30:16:36:15:61
Fingerprint (sha256): 85:a5:01:a3:cc:e5:d2:30:c5:10:50:d9:39:ab:b6:02:69:46:1c:a2:45:d9:d7:74:a6:6e:f4:fe:d1:14:4b:ff

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate k.yves-rocher.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k.yves-rocher.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k.yves-rocher.fr

Other certificates including the domain name yves-rocher.fr

(limited to 100 certificates)
t.newsletters.yves-rocher.fr
www.ambassadeur.yves-rocher.fr
datayr.yves-rocher.fr
images.yves-rocher.fr
macif-ecartecadeau.yves-rocher.fr
www.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
securepayment.yves-rocher.fr
image.care-chemicals.basf.com
t.newsletters.yves-rocher.fr
www.franchise.yves-rocher.fr
newsletter.yves-rocher.fr
franchise.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
k.yves-rocher.fr
securepayment.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
ambassadeur.yves-rocher.fr
images.yves-rocher.fr
survey.yves-rocher.fr
survey.yves-rocher.fr
secureorder.yves-rocher.fr
secureorder.yves-rocher.fr
survey.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
newsletter.yves-rocher.fr
search.yves-rocher.fr
ambassadeur.yves-rocher.fr
securepayment.yves-rocher.fr
securepayment.yves-rocher.fr
ambassadeur.yves-rocher.fr
www.yves-rocher.com
image.care-chemicals.basf.com
t.nl.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
t.nl.yves-rocher.de
secure.yves-rocher.fr
san-5-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.fr
www.franchise.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
image.care-chemicals.basf.com
e-cartecadeau.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
coordo-campagnes.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
recrutement.yves-rocher.fr
franchise.yves-rocher.fr
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
secureorder.yves-rocher.fr
*.crm.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
www.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
securepayment.yves-rocher.fr
secureorder.m.yves-rocher.fr
image.care-chemicals.basf.com
image.care-chemicals.basf.com
newsletter.yves-rocher.fr
datayr.yves-rocher.fr
franchise.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
vpc.yves-rocher.fr
k.yves-rocher.fr
datayr.yves-rocher.fr
e-cartecadeau.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
www.yves-rocher.fr
image.care-chemicals.basf.com
www.yves-rocher.fr
t.nl.yves-rocher.de
securepayment.yves-rocher.fr
images.yves-rocher.fr
secureorder.yves-rocher.fr
image.care-chemicals.basf.com
www.franchise.yves-rocher.fr
ambassadeur.yves-rocher.fr
nocdn-w.yves-rocher.fr
preprod.e-cartecadeau.yves-rocher.fr

Certificate

The complete raw certificate details for k.yves-rocher.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14888567801015510070497370037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 12:04:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 12:04:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k.yves-rocher.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809037092272568086990578047378267234075225838470629043020536385702782577613539379854999778491614645270863656846919278240242503617822917448143878955853225365837729724017996935206852493061701973478008615744540952961676084370738198997667620032162625939625279012504262236950423909635658891256786085603565735966567635007333451540455951355023269490995819843429217331751886832279308349757167441382067741255441128257482924062621415292163670494291964410570634616199200121150435064736725871945829580436708425220334083480945957399839136754196572492159095218311866608790050059403234122404225463273374858590526221121841415264631374865315740043561945458167780812703628676287678779963069917554907970306288517629095301749670073112091973324673828851831929268677999780274214946248261060479098485318564905503792870273770581589063065623768993097557081347660693962364013798679544678972636637540173142685410588213693673404647324420035879653814839618782844698761770150808437804481483996468632876845018045599314524015420115413084360383760121721163878563652521846847676091593251557604222913564156697551992924972007703209751351125276161632822371126631673223336254158322205603854367739262409955673803967809299919565212444691910328116193744156673037021185366359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.yves-rocher.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f262102dea63c617b0dedb8ec62aaff863315927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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