www.jpg.fr

- Staples Europe B.V. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:a0:c7:04:8b:9e:5d:16:2a:21:c0:d1:1d:0b:28:d5 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Staples Europe B.V.

Organization: Staples Europe B.V.
Organization unit: Staples Europe Colt
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a0:c7:04:8b:9e:5d:16:2a:21:c0:d1:1d:0b:28:d5
Serial Number (int): 7480944035923794758168902680414202069
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4a:0e:1c:f8:bb:9a:26:ba:af:a3:91:00:97:ec:fa:9a:69:7d:62:c3
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): c2:4a:1d:9d:84:2d:4c:1d:dd:76:a8:39:ce:58:70:0c:18:59:6a:eb
Fingerprint (sha256): 90:79:0b:d3:ca:c4:a3:27:bf:3c:82:c4:ee:42:fa:fc:f8:f1:95:10:3f:aa:b0:82:db:ad:5f:24:8b:9b:ef:49

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.jpg.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jpg.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jpg.fr
jpg.fr
images.jpg.fr

Other certificates including the domain name jpg.fr

(limited to 100 certificates)
www.prod.jpg.fr
www.jpg.fr
www.jpg.fr
partner.vertbaudet.fr
www.prod.jpg.fr
www.jpg.fr
secure6s.scene7.com
*.jpg.fr
secure6.scene7.com
partner.vertbaudet.fr
secure6.scene7.com
secure6s.scene7.com
www.jpg.fr
secure6.scene7.com
www.prod.jpg.fr
www.prod.jpg.fr
www.raja.fr
partner.jpg.fr
secure6s.scene7.com
www.raja.fr
www.prod.jpg.fr
secure6.scene7.com
secure6.scene7.com
partner.vertbaudet.fr
partner.jpg.fr
secure6.scene7.com
www.prod.jpg.fr
www.prod.jpg.fr
go.jpg.fr
www.prod.jpg.fr
partner.jpg.fr
www.jpg.fr
www.prod.jpg.fr
go.jpg.fr
partner.jpg.fr
www.jpg.fr
www.jpg.fr
www.raja.fr
khq.jpg.fr
secure6.scene7.com
partner.jpg.fr
www.prod.jpg.fr
go.jpg.fr
www.jpg.fr
www.jpg.fr
secure6s.scene7.com
www.jpg.fr
www.prod.jpg.fr
secure6s.scene7.com
www.jpg.fr
www.prod.jpg.fr
partner.jpg.fr
www.jpg.fr
www.jpg.fr
www.prod.jpg.fr
www.prod.jpg.fr
www.jpg.fr
www.prod.jpg.fr
www.jpg.fr
partner.vertbaudet.fr
www.prod.jpg.fr
www.prod.jpg.fr
secure6.scene7.com
secure6s.scene7.com
www.raja.fr
www.prod.jpg.fr
www.jpg.fr
www.prod.jpg.fr
www.jpg.fr
secure6.scene7.com
www.jpg.fr
partner.jpg.fr
www.prod.jpg.fr
www.prod.jpg.fr
secure6s.scene7.com
go.jpg.fr
partner.jpg.fr
www.prod.jpg.fr
www.jpg.fr
partner.jpg.fr
www.prod.jpg.fr
www.prod.jpg.fr
secure6.scene7.com
www.jpg.fr
www.prod.jpg.fr

Certificate

The complete raw certificate details for www.jpg.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrNCQ4NPakMSsPIBEYor
w3r7/wwJrzp8z03pAFIw/WbtemQjTfI5ChLpSjRfdmv5a2pLaMwS2RjbXDKVvUlM
IpWQ+bfcrOGIg5QNFMw+gMGcZfQsLjeF7SOh6eGebbL3MC8bfvgUA9MX35/VybLd
BQPLAkrx5tgxDsn6PqyDWZqvd3Ap2AHXGOnFtyQH+tyika20u0CVftTUvrByys0J
bcUxfxWaYxf98HXOlrOpn6XLNjf0zI5X2kDW4ZcDauQLC55lPXzoc5qIznhFfdM4
3t0yoeA7p85xjzC7sbMsVhDwz8ioZ1ZIFPTCCaV4yxPMzB3TYUXRjbkhOZZy054O
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7480944035923794758168902680414202069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staples Europe B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staples Europe Colt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jpg.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22053860893970287897150205732213972500724494663990634659062963725478018233552952432057348300207359583365994600394533349627960006840428299182759676947066656838250284854105108151963199556916796707582662426103978113475845174034820095578876073696557321220208954444853377138011435884133414267149835042149314403942885677552203496286831209736761249649127973467205872056438306030685649775710003400339318858848860387652040541477292969572447960824916780929449613635695312602499813336377332444573144427377945857269863655345745055841083926711908195180080505600625954887604641824591721146452634365199601886806440301769000348421671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a0e1cf8bb9a26baafa3910097ecfa9a697d62c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.jpg.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016414157f400000040300463044022041a31dff897c541a3a7417a06ace7ceeac5253e0ad8037c023935e8a3ac323330220120fb7cc77b393c153886a8581285fce50776b10f72b0e869aa4b128614208a00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016414157f260000040300473045022100b5d43286a4c696af6f16161b7e494b3191c6f8961be4df96db57165594138b7202205afd1d02357421120ef76174a90e80557894654b8b8860f0349343e2dd4fa495
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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