appserver.leetechnologies.com

- Schneider Electric Industries SAS -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:d7:33:f4:be:d7:ad:50:c6:e7:27:22:55:de:a6:85 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
Organization unit: Global Operations
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d7:33:f4:be:d7:ad:50:c6:e7:27:22:55:de:a6:85
Serial Number (int): 7763537597133896397089324189932758661
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:6d:be:89:7a:c0:5d:c2:ef:49:e9:e0:77:71:8f:54:73:65:18:c3
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 95:c9:39:6f:6a:1f:eb:8d:23:8d:8d:6f:31:c9:0c:1f:02:ab:26:0d
Fingerprint (sha256): b7:3a:12:d3:fe:07:0d:c8:29:ea:01:ee:f7:5d:37:ba:07:6c:f6:ba:c3:06:b5:b8:c3:4f:3e:88:c3:4a:48:3e

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate appserver.leetechnologies.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appserver.leetechnologies.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appserver.leetechnologies.com
appserver-us.schneider-electric.com

Other certificates including the domain name leetechnologies.com

(limited to 100 certificates)
appserver.leetechnologies.com
appserver.leetechnologies.com
bp.leetechnologies.com
www.mcs-us.schneider-electric.com
webmail.leetechnologies.com
www.mcs-us.schneider-electric.com
sp.leetechnologies.com
www.mcs-us.schneider-electric.com
appserver.leetechnologies.com
sp.leetechnologies.com
appserver.leetechnologies.com
*.leetechnologies.com
sp.leetechnologies.com
www.mcs-us.schneider-electric.com
www.mcs-us.schneider-electric.com
extranet.leetechnologies.com
www.pw.leetechnologies.com
citrix.leetechnologies.com
citrix.leetechnologies.com
appserver.leetechnologies.com
bp.leetechnologies.com
bp.leetechnologies.com
sp.leetechnologies.com
appserver.leetechnologies.com
exhubcas.leetechnologies.com
spx.leetechnologies.com
bp.leetechnologies.com
webmail.leetechnologies.com
*.leetechnologies.com
www.mcs-us.schneider-electric.com
citrix.leetechnologies.com

Certificate

The complete raw certificate details for appserver.leetechnologies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7763537597133896397089324189932758661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appserver.leetechnologies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853870459205434502046430392155847075281444482127569878069690357639597480112738878729639542727541579988418346755989241110073510930658348483322978712990886401395249636445461562782599243407418819488661042807541723672589402604702940132343169619730178288336689186371765872445486675958226115172550105795703331488891875201639754585481181936590883740220685056699387111216164479673503208577239181837494160851161931953817000278999597552561446568196515255609899922408120723759163413483959119147456246400306196144265249193542186264839005952527668010542682958555975802444758379960839516554503150333533458383531885774439831211592265789801862963817937145627050594801110564548328288152202954853185549613515626307897583082844309005162569020364097394529427188882279490945246057967895406388675017796706503528845163678035153933117620290679858162859248273601620308143091185522328983942127512317729900386238016901529434472968950361393730588739520053646740192230307414249771603982492707984348512203630131002781218892290198469472533317410340002926938101176210154985791590836710126042510872484926529622132084068759306620278639077675574603960183275689008052014424270995339280193979629418254226810428115625073744152173024207609644688862956350755194839332796551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							836dbe897ac05dc2ef49e9e077718f54736518c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appserver.leetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appserver-us.schneider-electric.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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