biel-galle.xenios.eu

Issued by Gandi RSA Domain Validation Secure Server CA 3

About this certificate

This digital certificate with serial number c1:8c:cb:d5:21:2c:86:67:4a:83:6d:9a:0e:db:6d:7c was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=biel-galle.xenios.eu

Gandi

Organization: Gandi
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): c1:8c:cb:d5:21:2c:86:67:4a:83:6d:9a:0e:db:6d:7c
Serial Number (int): 257272058961698628928489031602414513532
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 60:c1:df:37:ef:e5:9d:26:f1:05:98:33:43:4c:1b:60:38:a6:f0:53
AuthorityKeyId: 81:11:92:de:66:32:a5:b0:5b:33:3d:65:43:85:fc:d4:04:2d:f1:ae

Fingerprint (sha1): d1:ef:f8:55:0d:24:33:ca:1d:db:98:ea:d7:4b:cd:7f:8e:78:aa:d8
Fingerprint (sha256): b3:f5:93:1f:e2:69:4f:d7:56:5d:ae:34:8e:77:25:fc:1f:25:19:5f:b4:d6:7e:61:c8:c0:77:fa:20:b1:64:6e

Issuing Certificate URL: http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate biel-galle.xenios.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biel-galle.xenios.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biel-galle.xenios.eu
www.biel-galle.xenios.eu

Other certificates including the domain name xenios.eu

(limited to 100 certificates)
massa.xenios.eu
evrard.xenios.eu
re3.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
biel-galle.xenios.eu
biel-galle.xenios.eu
deguide.xenios.eu
brule-scieur.xenios.eu
raxhon.xenios.eu
schmitz-noel.xenios.eu
deguide.xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
j-paques.xenios.eu
actionre3.xenios.eu
brule-scieur.xenios.eu
biel-galle.xenios.eu
brule-scieur.xenios.eu
xharde.xenios.eu
schmitz-noel.xenios.eu
schmitz-noel.xenios.eu
www.xenios.eu
www.xenios.eu
www.xenios.eu
hostarii.xenios.eu
biel-galle.xenios.eu
biel-galle.xenios.eu
xenios.eu
schmitz-noel.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
biel-galle.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
j-paques.xenios.eu
schmitz-noel.xenios.eu
tefnin.xenios.eu
castiaux.xenios.eu
deguide.xenios.eu
biel-galle.xenios.eu
brule-scieur.xenios.eu
www.xenios.eu
castiaux.xenios.eu
raxhon.xenios.eu
biel-galle.xenios.eu
crabbe.xenios.eu
deguide.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
hostarii.xenios.eu
j-paques.xenios.eu
raxhon.xenios.eu
j-paques.xenios.eu
www.xenios.eu
j-paques.xenios.eu
j-paques.xenios.eu
castiaux.xenios.eu
biel-galle.xenios.eu
castiaux.xenios.eu
hostarii.xenios.eu
extranet.xenios.eu
biel-galle.xenios.eu
castiaux.xenios.eu
remy.xenios.eu
crabbe.xenios.eu
phsavdb.xenios.eu
www.xenios.eu
deguide.xenios.eu
hostarii.xenios.eu
www.hostarii.xenios.eu
evrard.xenios.eu
castiaux.xenios.eu
evrard.xenios.eu
tefnin.xenios.eu
hostarii.xenios.eu
schmitz-noel.xenios.eu
raxhon.xenios.eu
raxhon.xenios.eu
phsavdb.xenios.eu
castiaux.xenios.eu
phsavdb.xenios.eu
crabbe.xenios.eu
evrard.xenios.eu
www.xenios.eu
hostarii.xenios.eu
brule-scieur.xenios.eu
deguide.xenios.eu
phsavdb.xenios.eu
remy.xenios.eu
biel-galle.xenios.eu
schmitz-noel.xenios.eu
huissier-christiane.xenios.eu

Certificate

The complete raw certificate details for biel-galle.xenios.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3waJ0wKd1wxss4MSRW+u
+YJrrJODKCamGHSw+zAKvoWlTWjQeOd7rt7pQILn/cBogUL/NZ3T6m5WVvRw7PKZ
bRYhDzVadm6kWAFdQdGcCgrpkqsxm7XtdwmuTScqiKinyslNZlQy050zYVxqXw22
ERFN+dt/bc3gBVCRcrnu9RV7isB2gsek72H2ZZZeyn8v/bIoTt1gz5zasv+ZGm+r
Vq6VUM56kY1oGlVHBIiltaO3tlJx7QoGIAfIVrce4g4aZAQiZbHXsgjtc4vxvFdh
B4Z67hGR1QwBT1Y2sp8Amyc8gtoB3o4nLKAFmrSOoX67/KBi457mbHL5ymbNQROM
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 257272058961698628928489031602414513532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi RSA Domain Validation Secure Server CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biel-galle.xenios.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28154366200809159230009069975188274240190003820856137634331637283658644334569132085738343644207557551310555557795686050442924093596642634945858464648936352134014013452662250095950580746675319886534673433554228330251474281230918754210052646938327644530343410416374747437197065653326534926558481919965701102030909404427742262275089512332464712281879758141541501240900290179415701646884144184696492756095650197359718231405171434246511550677488997342421358100556125078002761773536822398098549616029877694741492777545959105051417230073067595559041677178739661200609377909977512017264620967485580715251221628591574684503177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 811192de6632a5b05b333d654385fcd4042df1ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60c1df37efe59d26f1059833434c1b6038a6f053
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/GandiRSADomainValidationSecureServerCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biel-galle.xenios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biel-galle.xenios.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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