www.iec-paris.fr

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 5e:dd:19:f2:9c:12:7a:43:1e:95:40:c5 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.iec-paris.fr,OU=Domain Control Validated,C=FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:dd:19:f2:9c:12:7a:43:1e:95:40:c5
Serial Number (int): 29358886063861592734773362885
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 7c:b7:04:c0:40:85:c4:85:52:65:c2:50:95:17:f4:36:d0:03:2b:00
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 75:c1:be:cc:99:1a:78:91:2c:c4:d3:4d:83:11:5e:28:5a:7c:a9:0c
Fingerprint (sha256): a4:ed:84:1d:ac:34:ab:63:bb:1a:62:68:70:06:d7:06:2a:a2:8c:9b:f1:3c:2b:6b:8a:de:da:81:35:00:64:a1

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate www.iec-paris.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iec-paris.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.iec-paris.fr
iec-paris.fr

Other certificates including the domain name iec-paris.fr

(limited to 100 certificates)
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
www.cours-anglais-paris.iec-paris.fr
www.iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
www.kick.iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr
iec-paris.fr

Certificate

The complete raw certificate details for www.iec-paris.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1YMSn8UCYYpDUZ8a7AQ9
DTKZMwBsLylX4oy7s7i1SqBz8l57MPMxJKmF4jd4rAthQguqaFqIXYPVX3ouqMS6
cBkn8AtFMk9YKZ+OyRru7Nw17pGZOEPWCB5FwXVdChXDvyk3/cxVlGwGUX58venQ
E89EJFlWg6dqhNxi9FMzOkgj39RHJ+TAcWQ/AjQ9x6ldZMXHvvs6HF3XvUkJ1dlh
kjmMG1SuGE/shELhLQD5BXgFNmud8Y600HBhb8YJoKHwiUrf7qAOxx2kanAaDkXv
RCn6Xsn0D7wACZYUo/7Y1/MeqtLZIhKDVljOszMQ5rIcz/xfnPDncYkrSFoQtXfX
yhOJUwIOzScWFyEAxoQOpwdAD1ykscH8Ds6f9ibkACYhF/bzzf1dph0gc49zzIVa
U8VVROmHIieol9YiDEzCWy/wS1T/hApz7sETPhMK+muHz0LtF1z+wUWfsbkYS2AY
FjsjbTJ5UouUOUZ7EQZZVsuJIpc9A9KbSh2pTZXM2guxNizYH1vxIdSom/OGOi+e
4PuXk9wpWe1WM9BQDfwRMc5EXgazT1haFxkBSnV/Dxw6bd4a7nZE+IddVliFLnql
1JG5LxHiDvHvDE4TWp8xkl8tmH7gUqDWvjN0I8ywDOoF9HPxzAzUIXbHTdZE/pZX
LWrjCjuGKquZ/C64vOxgYtUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29358886063861592734773362885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-01 09:46:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-02 09:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iec-paris.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871052976209412741865149645251292497805190686391815764586062968910239766377643728694308729471084309828488345267522904611891868871765496853440327343901047788355172831888208977503577833460379722686430122087225427008053617837271778439575395980750725489664647896270251530166790214226443184815637989336443529763036597318198920834091903140498208806231332264742750354076547237845314947745552805273928353776445134267324066029450859040648601808247017311321922871307630897567137626299899269985972814563199733702598825170612415070719327410403701390670702910262161623046696927060849313879292042224609601197525288822253812761892865719275527572142420297389254993515258601005579229919191898559513767304640440376421500507017884094298016683512363542321666905437603441228100292267114017443335847861795210916642322806183168834143731663970837466062879535444407461863241809204579192377362024457945519716132683256275671584605433007388800636218968382284229154012754353944934179738077424842537477966109654967064033983643920559324325936736731325332214974955149135924295062326360907183370011580283732735558573676243260940201589039524568165687480495133849577836711841638449142553153544978773971478984135595019628600043204314666018200422211121001757376772072149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iec-paris.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iec-paris.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7cb704c04085c4855265c2509517f436d0032b00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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