opo.dacia.ch

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 45:ed:8f:a8:4d:30:91:d0:d6:e4:bb:71:ba:c3:df:1c was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opo.dacia.ch,C=FR,1.2.840.113549.1.9.1=#0c1061646d696e406d616b6f6c61622e706c

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 45:ed:8f:a8:4d:30:91:d0:d6:e4:bb:71:ba:c3:df:1c
Serial Number (int): 92950219783425636754736318399968960284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:b3:16:dc:b1:cb:f1:05:49:df:0a:94:09:18:72:49:fe:01:50:38
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): 6f:77:44:ee:74:58:f7:25:df:89:44:68:0b:e4:60:30:bc:4a:9f:73
Fingerprint (sha256): b0:0b:2b:8d:68:39:07:13:b3:4a:33:27:24:14:a0:c6:e1:01:6b:06:66:0f:20:62:1e:e9:c2:d8:13:04:95:04

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate opo.dacia.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opo.dacia.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opo.dacia.ch
www.opo.dacia.ch

Other certificates including the domain name dacia.ch

(limited to 100 certificates)
media.renault.ch
webforms.dacia.ch
odc-ctrl.alpinecars.at
accessoires.renault.fr
winter.dacia.ch
*.wrd-aws.com
accessoires.renault.fr
media.renault.ch
*.wrd-aws.com
*.wrd-aws.com
www.dacia.be
gdl.renault.fr
www.leasing.dacia.ch
gdl-ctrl.renault.fr
*.wrd-aws.com
gigya-prod-eu1.renew.auto
gdl-ctrl.renault.fr
wintercheck.dacia.ch
media.renault.ch
wintercheck.dacia.ch
gdl.renault.fr
staging.dacia.be
conf.dacia.ch
*.wrd-aws.com
odc-ctrl.alpinecars.at
conf.dacia.ch
staging.dacia.be
mysandero.dacia.be
odc.renault.fr
*.wrd-aws.com
www.renault.fr
webforms.dacia.ch
gdl.renault.fr
gdl.renault.fr
*.wrd-aws.com
media.renault.ch
gdl-ctrl.renault.fr
winter.dacia.ch
lcl.renault.fr
forms.dacia.ch
www.dacia.be
conf.dacia.ch
*.wrd-aws.com
m.dacia.ch
webforms.dacia.ch
gdl.renault.fr
*.wrd-aws.com
accessoires.renault.fr
staging.dacia.be
www.leasing.dacia.ch
dacia-tage.ch
*.wrd-aws.com
opo.dacia.ch
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
*.wrd-aws.com
opo.dacia.ch
*.wrd-aws.com
www.renault.fr
lcl.renault.fr
media.renault.ch
conf.dacia.ch
www.renault.fr
lcl.renault.fr
news.dacia.ch
daciashop.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
lcl-ctrl.renault.fr
winter.dacia.ch
odc-ctrl.alpinecars.at
media.renault.ch
*.wrd-aws.com
www.renault.fr
accessoires.renault.fr
odc.renault.fr
media.renault.ch
odc.renault.fr
conf.dacia.ch
webforms.dacia.ch
www.leasing.dacia.ch
gigya-prod-eu1.renew.auto
media.renault.ch
webforms.dacia.ch
*.wrd-aws.com
*.wrd-aws.com
odc.renault.fr
lcl-ctrl.renault.fr
*.wrd-aws.com
media.renault.ch
odc-ctrl.alpinecars.at
*.wrd-aws.com
news.dacia.ch
*.wrd-aws.com

Certificate

The complete raw certificate details for opo.dacia.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Tzt8cUoFJLj5YtOc6g
SXOE5/mOzJ3S6MI9SzSEAAlDpCCztRQV5TXR4SFGVVKAPB30RRXeD/3ACQjJbzME
s2h/EHJCWzPFDDk1lQiugcbXXyYt7Yp5n3cRSY5qPUTJNpD2FrADvT4OWt9jTyZz
Fx/ZQdh6SNGJdRS2/thEydys5hBGutvPwu7TkBdlY94mkMswW6X7PqQLv4S6Zinf
tM8822zE1ISNI3OLEY0r41rqCI1mAQ5WupwU2dAdwCxAJ//sm6nKAXgFwf2WxC06
6X8qHaEXnYNdtsMYSWt/RUtQmIX9JKvtPBxCaYuSA3Xf5z98UDDCdxyFkbiP8HP/
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92950219783425636754736318399968960284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 14:21:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-26 14:21:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'opo.dacia.ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20610845219249917887803337258718886794934186559543978884682785546982880491692811903141553946403687819697201642631445347247557382618308256939944795994342492174595909706569900456325302973761194540841570877449755646839713225006341553645573182497219231948347662666037772008254426104985185878372250369714960535928437172232588187814012503538775157784451516087253222056180244426312758318642716894390164807089623263868695077866948134888823485354194461405912941483065244371502325684570078174387230402189408184395198950652369698800247911052223482179298238437570490855777440823761705220606513663139214377536081433769891645882301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b316dcb1cbf10549df0a9409187249fe015038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opo.dacia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opo.dacia.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001711733fc4e0000040300473045022100cbadeff21f87b72088ab8bcca8b906eaff729b6034886b9d392e6d563b329d480220420a8080242cfd8f21af8274296220016596c837ec1a25a35e06112c00c4b1760076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001711733fc630000040300473045022078f0dc6e6e58b8375ba82b91d56b598507e328881206bcd4be0e2778dea5a52f022100eb4b5b1da3291d09ff881c926c9960adaedda42db140c48f75608c553efc5d3b0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001711733fc390000040300483046022100f92de9639bd7b11966d9554cb393f6fd5fc36a331f86bb34e5fa5728bd478611022100837e92172ddf0cc14b4d1a9ce85882240a6078c49f3bb8af7392f789d970c4c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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