www.sport-sante.fr

Issued by Trust Provider B.V. TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:ee:ba:fa:1c:71:cc:a8:d8:c7:86:0e:3f:9b:df:e1 was issued on by Trust Provider B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sport-sante.fr

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ee:ba:fa:1c:71:cc:a8:d8:c7:86:0e:3f:9b:df:e1
Serial Number (int): 10544154966855763232750386163220209633
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:f4:70:6a:be:66:05:51:96:67:6d:16:72:0e:de:76:16:22:8e:0c
AuthorityKeyId: f5:56:22:1f:d9:bf:6b:59:24:52:b0:e1:6a:cd:c0:e1:57:67:e9:e8

Fingerprint (sha1): 50:d1:fe:b8:c8:01:9e:a7:38:73:6f:93:b6:54:f7:f4:bd:80:ef:94
Fingerprint (sha256): 8e:2b:a3:6c:17:42:64:f1:19:a0:40:d3:1a:77:21:d9:03:30:ab:09:28:2b:fa:fd:f9:e2:9b:35:1d:ea:4e:9c

Issuing Certificate URL: http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt

Revocation information

OCSP Server: http://statusd.digitalcertvalidation.com
CRL Distribution Point: http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl

Check the revocation status for certificate www.sport-sante.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sport-sante.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sport-sante.fr
sport-sante.fr

Other certificates including the domain name sport-sante.fr

(limited to 100 certificates)
captive.fr
cert1.site.calypso-event.net
www.courirsportsante.fr
cert1.site.calypso-event.net
www.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert1.site.calypso-event.net
captive.fr
girk.it
captive.fr
cert1.site.calypso-event.net
cert9.site.calypso-event.net
cert6.site.calypso-event.net
agfederale.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
captive.fr
cert1.site.calypso-event.net
cert6.site.calypso-event.net
captive.fr
cert1.site.calypso-event.net
cert9.site.calypso-event.net
captive.fr
captive.fr
sport-sante-epgv.captive.fr
cert1.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
www.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
cert6.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
i-programmes-epgv.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
www.sport-sante.fr
i-programmes-epgv.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert1.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
courirsportsante.fr
captive.fr
captive.fr
cert1.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
captive.fr
cert9.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
cert6.site.calypso-event.net
cert9.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
cert9.site.calypso-event.net
cert9.site.calypso-event.net
captive.fr
i-programmes-epgv.sport-sante.fr
cert1.site.calypso-event.net
cert6.site.calypso-event.net
www.sport-sante.fr
cert6.site.calypso-event.net
cert6.site.calypso-event.net
cert6.site.calypso-event.net
cert9.site.calypso-event.net
captive.fr
cert1.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
i-programmes-epgv.sport-sante.fr
i-programmes-epgv.sport-sante.fr
cert6.site.calypso-event.net
cert9.site.calypso-event.net
cert1.site.calypso-event.net
courir.sport-sante.fr
cert6.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
captive.fr
cert9.site.calypso-event.net
cert6.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
sport-sante.fr
cert9.site.calypso-event.net
cert9.site.calypso-event.net
i-programmes-epgv.sport-sante.fr
captive.fr
cert1.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
cert1.site.calypso-event.net
cert9.site.calypso-event.net
courir.sport-sante.fr
captive.fr
captive.fr
captive.fr

Certificate

The complete raw certificate details for www.sport-sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NhtkaD08uzARzeDXAYA
J0GbDlW3FQdKH2Q2504p1GK89CqJeUdKPadU/BlDGSwkaFN52gUaOk4F9WD+z0Da
ulwl4FB1Ag5mPfJ0Amm8SZhibjqABWjUpvNxs1pUzWt5pYyLFmBfmBchrZtbnhbB
gLiilW51AoO+6CnmxUsPaswFMNfSm+OpfKFLI8TWjdZKSpOUfTaz6Qtr1hSVfDPF
B0kaWA/LDyC3puAhUWdawOTwkd8OMfpxb3FtUYLKUAf3XkVVjatuwJ1W3AWSPKwF
IBmT76QPmOJZLvnDjmaxwEEkgnfYLxCF+WVqRDL/UQVJVeo0rzd5LCA4p2QwV1yW
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10544154966855763232750386163220209633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sport-sante.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28384104938539274301311508464963328674269707701064497194347095914359037381938467868900624532504231527519097017706248200489180749435858828988616515027006499372064305093197857071501676818617197282226828542439089073801036665875659271652561120040231697329885522413822399425829699712818752512223540788113950537388050624907299675323689740773709760753713226380722148710796698629718165161429866926222232464328153802579432278237995354818464532090582232156710409270416064778311130190222780573589486428835375239279202810476649519825222235654757129937978452129326714228222443992285245426375797840616455415759342156027594819802751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f556221fd9bf6b592452b0e16acdc0e15767e9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8f4706abe66055196676d16720ede7616228e0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sport-sante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport-sante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdpd.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://statusd.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digitalcertvalidation.com/TrustProviderBVTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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