chb.gfi.fr

- GFI INFORMATIQUE -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 1d:de:c7:a9:52:f6:48:2c:2b:e7:61:59:de:93:58:29 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

GFI INFORMATIQUE

Organization: GFI INFORMATIQUE
Organization unit: DSI
State / Province: Maine-et-Loire
Locality: BEAUCOUZE
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:de:c7:a9:52:f6:48:2c:2b:e7:61:59:de:93:58:29
Serial Number (int): 39704351395103391023014198317101045801
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 10:d9:a0:45:25:cc:8f:cf:aa:1a:04:bc:f0:48:03:1d:a4:ff:7a:31
Fingerprint (sha256): 86:18:7d:f6:34:0d:ca:b6:0a:58:25:20:3f:3b:0a:4b:d8:d0:c9:aa:07:ef:27:f2:d3:ce:f8:bb:56:3b:0f:3c


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate chb.gfi.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chb.gfi.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gfi.fr

(limited to 100 certificates)

Certificate

The complete raw certificate details for chb.gfi.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxbwc9ml3y8506wSyA8L
tAvPHJc91DdMf0QgMdSMSKYEjrh71SOhl2rav0nlm9aG7xEOWbPdLElL+Mo/nptQ
EWMtW5bEYLk2VP+yKyM5krnYlioaea4AbECU94jb5Ez16FsPycCSl7aY07QjwYk8
e4CeBLCXckNNmVv+zbaf3BYMS7FO1/4IBcpmzMi6mefLjBO79QA24P+ZFjOopN9c
O1ai2vc5zRGIsbJf1oOcr86OXw1RlBrS7GCTRgjAMTnba2LmDIFPUxr2w/1YraHF
3v8qfC3XsUkzqoTxn89FegHsW1N0iTOLYu3LsAUdktbkVUrMb6VYCqyXDdc4HodD
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39704351395103391023014198317101045801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maine-et-Loire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BEAUCOUZE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'GFI INFORMATIQUE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'chb.gfi.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24122828023032230042174377277990524019006006780226788095618239483506184931628671306144907409499143820206608828317901910585647530003678250581238628400557794465405315262962310996229146470598943603279866151359041746897160218928284433808856816067497842668201123040913671015606522535660224985162983718539713903913762405890900945055605494674876329631475026752046678640638725395073514795194233061855407055073751242031816419502547304597061593353422013394414631982198700976542127743289997648633000453696392414059075993131026525973743157117273402218965163427481616371061745412405999304071413083067864904903031488582243762783001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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