relevermoncompteur.enedis.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:12:dd:e4:34:7a:12:ba:63:25:bd:41:8f:c0:cd:95:10 was issued on by KEYNECTIS.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:12:dd:e4:34:7a:12:ba:63:25:bd:41:8f:c0:cd:95:10
Serial Number (int): 1492163257178392060864890499610511485539600
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 9d:09:59:08:a2:34:98:ce:1f:45:3f:d8:c2:39:dd:5a:38:59:ac:1d
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 67:73:31:26:8e:59:5c:10:cc:02:63:01:cc:d3:21:72:fd:ce:db:2c
Fingerprint (sha256): 9b:16:fb:d5:5b:a3:2c:14:4c:13:ee:94:4e:27:75:bb:28:d2:3f:a7:f7:07:d5:51:c7:42:75:ae:1b:58:1d:a8


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate relevermoncompteur.enedis.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for relevermoncompteur.enedis.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

relevermoncompteur.enedis.fr
relevermoncompteur.erdfdistribution.fr

Other certificates including the domain name enedis.fr

(limited to 100 certificates)
e-stock.enedis.fr
sikapa-iq.enedis.fr
ie-saas-test.enedis.fr
sge-perfi.enedis.fr
restheart.tmm.snatpool.f5ie.prd.lbp.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
m02.noe.ldap.prod.alpha.swb.enedis.fr
espace-client-particuliers-rec-dmz.enedis.fr
intrapreneur.enedis.fr
infops.enedis.fr
zep304dg.enedis.fr
espace-client-collectivites.enedis.fr
startmeup.enedis.fr
deck-recette.enedis.fr
gate3196.enedis.fr
portail-osr-prestataires.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
pcyintplypdi001.neoprod.edf.fr
ws.inforeseau.api.enedis.fr
espace-client-connexion-pprod.erdf.fr
int-myaccess.edf.fr
gate3360.enedis.fr
portail-osr-prestataires.enedis.fr
mooc.enedis.fr
microapps.enedis.fr
herakles.enedis.fr
zec304dk.enedis.fr
data.enedis.fr
api.public.cinke-evolution.perf.enedis.fr
archivage-disco.enedis.fr
pcydmzplywfe001.intranet.edf.com
board.qual.linky.enedis.fr
mooc.enedis.fr
noeintplypfe001.neoprod.edf.fr
laruche.enedis.fr
api-lincs-qualif.enedis.fr
meciteasy.enedis.fr
zhb-rest.tmm.f5ie.prd.lbp.enedis.fr
gw.hprd.api.enedis.fr
geosite.enedis.fr
sge-b2b.enedis.fr
sge-b2b.enedis.fr
collab.intranet.enedis.fr
gw.prd.b2b.enedis.fr
mooc.enedis.fr
ie-saas-test-ri.enedis.fr
espace-client-entreprises-pprod.enedis.fr
portail-osr-prestataires-rec1.enedis.fr
dataposte-sei.enedis.fr
moncompte-qualif-legacy.enedis.fr
datahub.enedis.fr
espace-client-particuliers.enedis.fr
bali.enedis.fr
alexv2-apipra-pprod.enedis.fr
zep3322a.enedis.fr
noeintplypfe002.neoprod.edf.fr
iq-caraibe.enedis.fr
alexv2api-prdn-pjv-02.enedis.fr
data.enedis.fr
noedmzplywdi001.intranet.edf.com
espace-client-particuliers-pprod.enedis.fr
egmaops.enedis.fr
distri-raccordement-mco.enedis.fr
intq.ecoflot.enedis.fr
prd.apigo.enedis.fr
data.enedis.fr
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
ecoflot.enedis.fr
alexv2api-recd-izi-01.enedis.fr
datahub.enedis.fr
moncompte-qualif.enedis.fr
moncompte.enedis.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
brandcenter.enedis.fr
lincs-live-admin.enedis.fr
appamiante.enedis.fr
espace-client-collectivites-rec-dmz.enedis.fr
fournisseursdenedis.enedis.fr
facile-commune.enedis.fr
pp-smartpush.edf.fr
accueil-operateur.enedis.fr
smartgrid-solenn.enedis.fr
noeplyaccess01.edf.fr
times-services.enedis.fr
elan-service-iq.enedis.fr
apigile.prod.enedis.fr
deploisat.form.linky.enedis.fr
espace-client.enedis.fr
pki.microapplications.enedis.fr
posteclean.enedis.fr
agir.oi.enedis.fr
myaccess.myelectricnetwork.com
gw.prd.tmm.enedis.fr
arcam.enedis.fr
infoflex-partner-gateway-rec.enedis.fr
noedmzplywdi001.intranet.edf.com
moncompte.enedis.fr
ws.sikapa-RCC.enedis.fr

Certificate

The complete raw certificate details for relevermoncompteur.enedis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzaUJ5Tk2vMnY2PzsioV
zFYXqqo6wtE996xJfjQTC707i2utwk5EUWkraT5EqdOtvCbQoOKM03VI5wQ4Ifoc
rKjL+yfH44yPgT2kg5w+ywXY7IkuzGEUlEmdF15cIk+9NSqqwDD80ZpWgnw5BUmG
CKzBUCcl0IiBjwL6Ke2/7byFEaD0rvsBUUhfinCqjT9tY1t9WQcViMDLa7gWK1X3
fUIPPVM7KfROCJeYdcj7736oDO6sZq0gtWFL9RdU1VeXWz0qVpaf5qfWGZRgwH0B
a64Vg460o38UHWs6sMAQrcGMTuxAUFeesPix6ViZMTnolNWxFg1klA63LOgKdnr9
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492163257178392060864890499610511485539600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-07 15:23:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 15:23:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'relevermoncompteur.enedis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23128523583132731203716530775279027259407179503663172614105946712672223148312937724774896748293146562346589552185987333074765134701643096173270073225619305174680845176954322657066328246820230883583953073248422720200332322606390462380204266808077763291403893215383877313638029896359830175541130674076701924294716628069228810792578810059833661992940428349941045830614715819035539701341426924904409184043330359269400521566943607139916218284039459639861758510424455931769807287871398630223780389284054181679131292362809687295162645036684515901531918973646837667800801729876198475283255608451355085933947441251707019525477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relevermoncompteur.enedis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relevermoncompteur.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d095908a23498ce1f453fd8c239dd5a3859ac1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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