www.saint-gobain.com.tr

- COMPAGNIE DE SAINT GOBAIN -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:7c:8d:ad:6e:b9:57:76:fb:f7:91:06:03:06:c3:6e was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMPAGNIE DE SAINT GOBAIN

Organization: COMPAGNIE DE SAINT GOBAIN
Organization unit: DSI
Locality: Courbevoie
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:7c:8d:ad:6e:b9:57:76:fb:f7:91:06:03:06:c3:6e
Serial Number (int): 12609770333016206733064839524562420590
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 80:8c:ba:c1:04:70:61:99:f5:06:9f:68:53:e5:de:a6:b6:60:da:c7
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 65:0f:61:b2:0c:b3:1b:1a:d4:85:4c:55:bc:ac:f3:de:9d:d1:df:31
Fingerprint (sha256): 92:38:a6:6a:1b:e5:7c:d0:ab:c7:24:62:40:9b:a6:11:64:ca:10:e8:40:25:35:2d:b1:f0:99:09:fb:37:7a:23

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.saint-gobain.com.tr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saint-gobain.com.tr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.saint-gobain.com.tr
saint-gobain.com.tr
nordic.saint-gobain.com
www.nordic.saint-gobain.com

Other certificates including the domain name saint-gobain.com.tr

(limited to 100 certificates)
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr
www.saint-gobain.com.tr

Certificate

The complete raw certificate details for www.saint-gobain.com.tr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25O088d4x62cJQeOHlK+
js0T/hdh78gMDHcSUwwtqDzRBevFhJ8xZAoQO8lN+AdJAgA7I3W0AZqUmbtoq4mO
izRGHre7hhECSK6Hy33aaWNuskk7/x9GMveFYrZg50dTffHnRnGZ3yKszqn1cawj
hov19hQYIYpgu+q1oMOmhGeyfriRawNjOJCqvJ/DDt8uIkei/S9YwhstIofIYMqh
Pent94M1Eh5H73/9ne6fPEzavNj5gE4F/OqT52bHzOoX1YnHSwq7aAQXibl7KVTc
KrHjF9ODs7Oci3CxeF8jyLeItkVswY5Z6MU5tji7WwMwLgRcqRUKI6VApchEY9Bt
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12609770333016206733064839524562420590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMPAGNIE DE SAINT GOBAIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saint-gobain.com.tr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27719025747396152486754493112845965457511150916007848447636183417369121953865718124076037984492171084844995119228381206070272220758449428301104788743334598909874144479084431637402791019648887559618383552497084550043580734086899768979759280197638807099214124268462865309505811745168982637431193610595120320240060155988971530500581655896091599060771699679016201350744334774557543217619880684431243777750867830667472529280973317084442800070905791465299686940522676306650600974765531289286280964710339655810280056704278619545457178176781995566475899682694796394361999523616699552698834940909472957015873266114570151292351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							808cbac104706199f5069f6853e5dea6b660dac7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saint-gobain.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-gobain.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordic.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordic.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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