lab-innovation.lectra.com

- LECTRA S.A -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:76:72:f9:28:04:59:54:f6:ed:0c:8a:b9:ab:f7:29 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LECTRA S.A

Organization: LECTRA S.A
Organization unit: DSI Infrastructure
Locality: Cestas
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:76:72:f9:28:04:59:54:f6:ed:0c:8a:b9:ab:f7:29
Serial Number (int): 15236530917833124558425497357509195561
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:41:c9:85:f3:a1:da:28:b7:8b:30:07:e6:01:40:0d:75:dc:74:10
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): b5:d2:d7:2b:0f:71:1d:47:71:f9:9b:12:d9:1a:f5:67:db:a6:8d:bf
Fingerprint (sha256): 8b:63:d1:3a:9e:52:2c:58:30:ef:c5:1f:96:75:d0:09:e6:f0:94:29:3e:a2:a1:bf:d2:9c:4b:3c:38:e6:66:ad

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate lab-innovation.lectra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lab-innovation.lectra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lab-innovation.lectra.com

Other certificates including the domain name lectra.com

(limited to 100 certificates)
service.augustusmartin.co.uk
*.lectra.com
e-suppliers.lectra.com
update.lectra.com
elearning.lectra.com
fno-rddev.lectra.com
ithelp.mjevansgroup.co.uk
*.lectra.com
service.augustusmartin.co.uk
dam.lectra.com
service.augustusmartin.co.uk
supportittest3.lectra.com
service.augustusmartin.co.uk
itsupport.b-gen.co.uk
net.lectra.com
ithelpdesk.dccoilireland.com
helpdesk.ebusco.com
soft-serveur.lectra.com
fno-rddev.lectra.com
sip.lectra.com
*.lectra.com
helpdesk.bettybarclay.com
elearning.lectra.com
supportittest3.lectra.com
ithelpdesk.dccoilireland.com
servicedesk.mvhomes.org.uk
support.cantabrialabs.com
ithelpdesk.liverpoolairport.com
itsupport.b-gen.co.uk
*.lectra.com
update.lectra.com
mas.aleaticalabs.com
helpdesk.groupe-r.ch
service.augustusmartin.co.uk
support.oprisk.hu
*.lectra.com
files.lectra.com
service.augustusmartin.co.uk
elearning.lectra.com
itsupport.b-gen.co.uk
elearning.lectra.com
service.augustusmartin.co.uk
servicedesk.mvhomes.org.uk
operational-excellence.lectra.com
*.lectra.com
dam.lectra.com
wcsip.lectra.com
autodiscover.lectra.com
origin-prod-www.lectra.com
*.lectra.com
ithelpdesk.dccoilireland.com
webspace.lectra.com
*.cloudservices.lectra.com
ndchelpdesk.ndc.nato.int
*.lectra.com
update.lectra.com
*.lectra.com
helpdesk.prosapient.com
help.amiculum.biz
helpdesk.ebusco.com
*.lectra.com
support.cantabrialabs.com
go2.lectra.com
service.augustusmartin.co.uk
support.oprisk.hu
*.plm.lectra.com
*.cloudservices.lectra.com
service.augustusmartin.co.uk
cutter-report.lectra.com
helpdesk.groupe-r.ch
*.lectra.com
helpdesk.ebusco.com
update.lectra.com
*.lectra.com
update.lectra.com
download.lectra.com
servicedesk.nilgosc.org.uk
origin-prod-www.lectra.com
*.xchange.lectra.com
itsupport.b-gen.co.uk
modarisv8.lectra.com
go2.lectra.com
helpdesk.ebusco.com
*.lectra.com
*.lectra.com
modarisv8.lectra.com
ithelpdesk.smartmanagedsolutions.com
service.augustusmartin.co.uk
soft-server.lectra.com
helpdesk.ebusco.com
ithelpdesk.smartmanagedsolutions.com
lab-apple.lectra.com
*.lectra.com
servicedesk.mvhomes.org.uk
*.lectra.com
supportittest3.lectra.com
ithelpdesk.liverpoolairport.com
mas.aleaticalabs.com
lab-innovation.lectra.com
go.lectra.com

Certificate

The complete raw certificate details for lab-innovation.lectra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQqDIkiseBjIT1Xa9Sq3
ixlwAPiD38ZUFWU1q+J6ycqKdnA3dsKueJeUhaaONiEEJ5IH0gi8ob18ZShcoscZ
Yyt5CeXccwe7IU8l+2X0NTkB9uBaKtrWWITYqx/1pqFBrHi1cBA/253z3m2NVyuU
riIn7YVRPhAf+38c+4hIA3eRSlhPkhkpEDQ9AGOvyaU/bYbLCQlLlRdaFkDw5QYa
FYOYqESnB749/yokdK6Rbm2rmxiCu+oI92JDhk/LWTBU3F6shXSR4EXumrHl3m2Z
dJBa5Wi+Rdz/dKIZTzDIhxK8cqRSHagGdMV7iN7IB+Z+GI06Ou95xREL1IxTG++A
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15236530917833124558425497357509195561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cestas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LECTRA S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lab-innovation.lectra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22349363758665774135802307346026783629207789581991530455825535299909372245151100474135335999686335539983317305533792237206045374500696788378393591665594508795870920899126486364023249064223126617555097030609670604698492930490021627535354802230102175527816020041591878779626110694192517872044357439525429877885990833578594952774759811055043645184673610910711563950647429139438409270329068059235013439112545451694104717042584691128209624648318045667370812807791505611416860433495128355622140255121976267209487784512972482286418224344908400231463026269773389981547870368780100374384291228159164481524926314349696040009731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f741c985f3a1da28b78b3007e601400d75dc7410
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab-innovation.lectra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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