bonapp.elior.com

- ELIOR DATA -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ba:58:59:e5:ef:18:12:7b:c8:25:3a:8b:d7:53:8d:34 was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ELIOR DATA

Organization: ELIOR DATA
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ba:58:59:e5:ef:18:12:7b:c8:25:3a:8b:d7:53:8d:34
Serial Number (int): 247695152691245376809560270115360181556
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:08:9c:cf:29:47:09:42:2f:4f:27:90:87:3a:9a:43:fd:b9:7e:3f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 40:a5:01:a9:c9:5e:63:0e:46:07:8c:6a:71:c0:c0:31:7f:c8:7d:28
Fingerprint (sha256): ac:c0:f2:23:5f:ad:7a:ac:d9:92:9a:7f:07:3d:51:51:4e:09:28:22:5b:61:ab:4a:49:cd:2d:9c:55:9e:8e:23

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate bonapp.elior.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonapp.elior.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bonapp.elior.com
bonapp-dev.elior.com
bonapp-rec.elior.com

Other certificates including the domain name elior.com

(limited to 100 certificates)
*.dashboard-rec.elior.com
toptrack.elior.com
049633.tc-connect.elior.com
bonapp-api.elior.com
*.elior.com
mobilite.elior.com
*.elior.com
mkt.minasdepresentes.com.br
achats.elior.com
webmail.elior.com
webmail.elior.com
timechef-v2.elior.com
portailrestaurant-dev.elior.com
kanji.elior.com
005653.tc-connect.elior.com
webmail.elior.com
applis-elior.elior.com
roomservice.elior.com
060001.tc-connect.elior.com
imperva.com
049629.tc-connect.elior.com
webmail.elior.com
*.elior.com
dashboard-rec.elior.com
048839.tc-connect.elior.com
portailrestaurant-rec.elior.com
toptrack.elior.com
toptrack.elior.com
timechef-v1.elior.com
bonapp-facturation-api.elior.com
apptable.elior.com
servichezvous.elior.com
toptrack.elior.com
bonapp-facturation-api-rec.elior.com
monparcours.elior.com
servichezvous.elior.com
webmail.elior.com
*.elior.com
bonapp.elior.com
webmail.elior.com
monparcours.elior.com
kanji-auth.elior.com
recrut.elior.com
applis-elior.elior.com
timechef.elior.com
smartordering.elior.com
webmail.elior.com
*.elior.com
achats.elior.com
060892.tc-connect.elior.com
047463.tc-connect.elior.com
*.elior.com
chefsandgo.elior.com
roomservice-v1.elior.com
monparcours.elior.com
003368.tc-connect.elior.com
remotectrl.elior.com
*.elior.com
si-pro-tre.elior.com

Certificate

The complete raw certificate details for bonapp.elior.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tZ/v71VbwXUHFvtog90
KY/4qcEutYwLxcHS4XxQvdCW9vGvFTR7lHkAKiVWuLZ8xOVjvdoVLV7Nd0TcIN5p
t2hjOohZr5Wy1662da6a//dKJuvzsLsBoL8gknw1xuCVJowy0tZAuzW8fdWVbWbK
VE74W4MH94VAi62ply9fdoU+18nHnwM8x/8WnZ1mcRbyu7AbNxb/looHytRtsrIU
EYgGCyzSJdGzfJLe1lTdWwWjbWMxoLkN3UxaR5tXmGcGI6+qYnEiJSHhOLI00MBz
vsFQjjzqFoflYNXZxQUHM9kkSR1dQ8v3dhUw90n7UJBh0Q6eioOX3LwylrKC87Ce
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247695152691245376809560270115360181556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ELIOR DATA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonapp.elior.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27625723891327349480971345130707239386999687710037216443773376585787159784252049345058397540528140905659632231277298836726153264550904558809319163426854132328012549466347258274701249616765284256092340411314431758138850207218868515441306651401355494972870664152420511854494050660761486898328443982153381505404956351670640052994002632510640738289583484958543372167134085397647845771914200850807572965055457818568923933927720962773293205848912597404901008794279878534818802501694896462176775010354555232593166322863322784293890907391218228313827678864821562262690368443712504242290996545504431091926328459568228231847463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92089ccf294709422f4f2790873a9a43fdb97e3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018967cc0f540000040300483046022100f0444c50ff8234f0f0ab7e1d67e9b80e43b1be4138c31f0eeedc18c421641e5c02210088f672d3d968acab276ed9694f02d10fd1e28686bd2b1fa480e596cbef4ae6b3007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018967cc0fa20000040300483046022100d9acd7914ee112298412b98240efa44c6c679b5917bf7a35dc293bc5cc6a2174022100b0a4a19f43cc89ce721917b7cc9e2477e72cdcce8bcf0eab394bbd2725bf337a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018967cc0f8f0000040300483046022100aceb2692d0e68cd844bcdcf62307b056de309b563c69d502705eb929cbc9d0de022100bce5cb5cee1309a8281ac94bb8e6ab394a04ebff186271155ef998691037de5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonapp.elior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonapp-dev.elior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonapp-rec.elior.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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