www.aggema.com
- aggema SARLU -
Issued by GeoTrust Extended Validation SSL CA - G2
About this certificate
This digital certificate with serial number 69:93:df:37:fc:93:64:a4:d7:2f:b8:ba:72:40:24:55 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
aggema SARLU
Company registration number:
449 276 021
Organization: aggema SARLU
Organization: aggema SARLU
State / Province:
Hauts-de-Seine
Locality: Issy-les-moulineaux
Country: FR
Locality: Issy-les-moulineaux
Country: FR
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 69:93:df:37:fc:93:64:a4:d7:2f:b8:ba:72:40:24:55Serial Number (int): 140336734608679748771219270184980194389
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07
Fingerprint (sha1): f9:e2:10:7b:31:27:ff:45:4c:8d:aa:52:6e:82:2e:ca:cf:1b:3f:11
Fingerprint (sha256): 9e:b8:e5:94:1a:fa:b7:66:91:e1:9e:d5:04:7a:d8:0b:0f:e6:af:aa:61:c1:58:fb:7a:d7:6c:8b:dc:8d:bc:3e
Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer
Revocation information
OCSP Server: http://gtextval2-ocsp.geotrust.comCRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl
Check the revocation status for certificate www.aggema.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.aggema.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.aggema.com
aggema.com
aggema.com
Other certificates including the domain name aggema.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.aggema.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIQaZPfN/yTZKTXL7i6ckAkVTANBgkqhkiG9w0BAQUFADBY MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EgLSBHMjAeFw0xNDAz MTkwMDAwMDBaFw0xNTAzMTkyMzU5NTlaMIG+MRMwEQYLKwYBBAGCNzwCAQMTAkZS MR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEUMBIGA1UEBRMLNDQ5IDI3 NiAwMjExCzAJBgNVBAYTAkZSMRcwFQYDVQQIFA5IYXV0cy1kZS1TZWluZTEcMBoG A1UEBxQTSXNzeS1sZXMtbW91bGluZWF1eDEVMBMGA1UEChQMYWdnZW1hIFNBUkxV MRcwFQYDVQQDFA53d3cuYWdnZW1hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALo0NgAtF4lufq+8qKZl/pGoAsG8okwvgVw2wItkpfjoeouf5BCI TLobXtq0WBZbVtn+ZobgoXY5M9eTXT4ZLgrU5lnydrjPclCPOSqBK6TH9JI2cTTY ZEDVOFuoADJ1olsyJrPrYW2/ETunqqw16rAY6WAPyJSDtxAVBIlqXzltpOt6yJIc vnZuQ9qISbYVa/Epw1o8myhgSo69gZs0VpmnFPXcogRm/lll+JYhAGH09gXO3ELW HqB2a6OypFbd8oVWQkuxOeN29MMPnnwfDKuzgJnpD2hMX0ZF1XXAZsfKZfT/qw8x 8jzvMq3b2YIRw/hnjzR96E6+XEpL4UhHuicCAwEAAaOCAZIwggGOMCUGA1UdEQQe MByCDnd3dy5hZ2dlbWEuY29tggphZ2dlbWEuY29tMAkGA1UdEwQCMAAwDgYDVR0P AQH/BAQDAgWgMEAGA1UdHwQ5MDcwNaAzoDGGL2h0dHA6Ly9ndGV4dHZhbDItY3Js Lmdlb3RydXN0LmNvbS9ndGV4dHZhbDIuY3JsMEsGA1UdIAREMEIwQAYJKwYBBAHw IgEGMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291 cmNlcy9jcHMwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQY MBaAFG8mVtlc5/fJBCD4Hrp8kScvjPoHMHsGCCsGAQUFBwEBBG8wbTAuBggrBgEF BQcwAYYiaHR0cDovL2d0ZXh0dmFsMi1vY3NwLmdlb3RydXN0LmNvbTA7BggrBgEF BQcwAoYvaHR0cDovL2d0ZXh0dmFsMi1haWEuZ2VvdHJ1c3QuY29tL2d0ZXh0dmFs Mi5jZXIwDQYJKoZIhvcNAQEFBQADggEBABDgvF0hfQAz5l4mvBqjh9mBwTzKJnfC TesH/VvQb5PkCVWscbSH2UFYyLKaIn5fFUOD7AmZekR9IOwBGBRLewhFz4hA2DIp w1FZzB4G+9slo2Q6bZY2hfGjGUMeNtnJRpNfObjehT+VU/5yofLWRh95h9/TCahF vf4tFIlKnJrWLnKZys/tjLV7eoTFd4L2qsIp+PIyFljRwhMDErHgOgS4qsz0RWeq D4rXK/evVDy2J9JhrTSdI2/zpNiGNHXS/QcG9J+NVqz1ef+EFyNTknypTF/pr8mj sLA9mpDT/e1y1+p9Nl5Jz5ja2ZrHnhNRSGSQwG8GA92CyAvkhDudjgg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujQ2AC0XiW5+r7yopmX+ kagCwbyiTC+BXDbAi2Sl+Oh6i5/kEIhMuhte2rRYFltW2f5mhuChdjkz15NdPhku CtTmWfJ2uM9yUI85KoErpMf0kjZxNNhkQNU4W6gAMnWiWzIms+thbb8RO6eqrDXq sBjpYA/IlIO3EBUEiWpfOW2k63rIkhy+dm5D2ohJthVr8SnDWjybKGBKjr2BmzRW macU9dyiBGb+WWX4liEAYfT2Bc7cQtYeoHZro7KkVt3yhVZCS7E543b0ww+efB8M q7OAmekPaExfRkXVdcBmx8pl9P+rDzHyPO8yrdvZghHD+GePNH3oTr5cSkvhSEe6 JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 140336734608679748771219270184980194389 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '449 276 021' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hauts-de-Seine' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Issy-les-moulineaux' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'aggema SARLU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.aggema.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23506070897866505867913543419408700875093753044239648804647559226044678222653871103764144101225243310137187333905529597140595204416444897869310055573804526533535894486853855053224743141455354319725344320647776665034065435492123091696723530201979709836766568306740338287393888658077579892097410036847888909087021100470584337440181632695907122067806715852746085169609093514724071341253594160206454541622407101090288953878227755992701560682378085456200209728762606389523477794727689399744432312472505441818792039431525796092814637779292929815595374852561852440516847513199249898984965836578947062745848608670095965141543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggema.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggema.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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