extranet.aerospace-valley.com

- AEROSPACE VALLEY -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 54:a0:14:e1:fc:29:c5:dd:8a:16:51:47 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AEROSPACE VALLEY

Organization: AEROSPACE VALLEY
Organization unit: ASV
State / Province: HAUTE-GARONNE
Locality: TOULOUSE
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 54:a0:14:e1:fc:29:c5:dd:8a:16:51:47
Serial Number (int): 26190267572148672145286123847
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1d:b8:86:73:92:4e:04:31:f1:a2:50:58:25:c1:5d:e9:ee:e5:a0:92
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 54:29:8a:58:bb:a8:d7:f8:c7:0a:c4:37:f2:11:8c:7d:32:77:65:01
Fingerprint (sha256): c2:a7:cd:49:b7:14:9e:c8:64:d3:b5:d7:4d:a3:5a:b0:a9:9c:9c:c4:61:3e:70:ca:34:69:93:8d:32:3f:e5:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate extranet.aerospace-valley.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extranet.aerospace-valley.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extranet.aerospace-valley.com

Other certificates including the domain name aerospace-valley.com

(limited to 100 certificates)
mail.aerospace-valley.com
aerospace-valley.com
emploi.aerospace-valley.com
emploi.aerospace-valley.com
www.aerospace-valley.com
connect-preprod.aerospace-valley.com
annuaire-aerospace-valley.com
email.aerospace-valley.com
aerospace-valley.com
aerospace-valley.com
annuaire.aerospace-valley.com
www.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
www.aerospace-valley.com
extranet.aerospace-valley.com
aerospace-valley.com
www.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
www.aerospace-valley.com
connect.aerospace-valley.com
annuaire-aerospace-valley.com
www.aerospace-valley.com
aerospace-valley.com
aerospace-valley.com
email.aerospace-valley.com
annuaire.aerospace-valley.com
www.aerospace-valley.com
aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
annuaire-aerospace-valley.com
extranet.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
connect.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
email.aerospace-valley.com
aerospace-valley.com
extranet.aerospace-valley.com
email.aerospace-valley.com
emploi.aerospace-valley.com
www.aerospace-valley.com
aerospace-valley.com
emploi.aerospace-valley.com
www.aerospace-valley.com
email.aerospace-valley.com
extranet.aerospace-valley.com
aerospace-valley.com
emploi.aerospace-valley.com
emploi.aerospace-valley.com
emploi.aerospace-valley.com
annuaire-aerospace-valley.com
extranet.aerospace-valley.com
annuaire-aerospace-valley.com
aerospace-valley.com
extranet.aerospace-valley.com
aerospace-valley.com
connect.aerospace-valley.com
extranet.aerospace-valley.com
email.aerospace-valley.com
emploi.aerospace-valley.com
extranet.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
aerospace-valley.com
www.aerospace-valley.com
extranet.aerospace-valley.com
email.aerospace-valley.com
emploi.aerospace-valley.com
extranet.aerospace-valley.com
connect.aerospace-valley.com
email.aerospace-valley.com
email.aerospace-valley.com
annuaire-aerospace-valley.com
emploi.aerospace-valley.com
emploi.aerospace-valley.com
emploi.aerospace-valley.com
www.forum.aerospace-valley.com
emploi.aerospace-valley.com
aerospace-valley.com
annuaire-aerospace-valley.com
forum.aerospace-valley.com

Certificate

The complete raw certificate details for extranet.aerospace-valley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dWbwHbMbp5Iw6Wkh4TV
UZJsgdcyS1eAy/uycmXlbg24dI7TkDoog0vL4xtwoT+5zQYsys54MdqKs3CgwrNn
AEgIWHwFU8NcKrBn3ynO/JWEBUQfGdAm3sNewZQS5JPpoxWDgYseDrr7m6qPYMcD
Xf+XmthjcJKct5axVcosEdeQWa5denJYh1LSZCBv/unkb+Jw5OuHkd9/NU+Hvw+T
y7EZMY0kzxATtb8YHchPokSCXfUeSLaSx6CtT6fbFI0NCH8gk7uLVtbZVFBtMmps
IqtZt/HLUlvvmt3SgdmZehnb8w78mEpBK+pAJOtC7TovxiQeYAV6BIOrIxlnodad
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26190267572148672145286123847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-30 09:03:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 15:36:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HAUTE-GARONNE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOULOUSE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ASV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AEROSPACE VALLEY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'extranet.aerospace-valley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28508952847984874086822193125851234384887766165664042024110003376539352508425701815316225991035402864359001771419786953420500854366576729037836319366832139119839259695940839748331819240150144782418119476833035896662421183807888157194791798873289336989399760165547892315155219833749473707904213059140375286161717216981825154424263010701039522502195807591768035348214473522803570357046749883798313202361741611218101374437367391391012713598366412140579103468651954796226798546670882213958629530839373559057523785357540361662260199005821567009934592333765610212148794362705484859878858913575808168137711138783587196116361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.aerospace-valley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1db88673924e0431f1a2505825c15de9eee5a092
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d61903ea02034f8f4738d41182c95038486cc128c2c87387bc2b037bfaaf0b85c8d85e5533cddbb2cc8e9c6df15d2fa0e88a6459366e1ae79e5369f4e56e345f5ab240ac0738c8726a10784d830bd3e68a97f95298a84cf45215966f4204b79b90860adc7d2f13c1b52985259427fc7e7922419b7b99d3db880a00f2ca196329a71296c4d86b7be36b084e28c0f69f89d86eb28c207a98e5176e153f4bca671384951df8f17c2e67954f6604013a788743240f2d4d1da06c7829320895fa8233b061dda7e429706b216d35d5e840e3c765be7581083c9c8000d7017c3ec373e79a00a930f38d2fcf698d7ea3314e6c6da6d49ff486f06d229a482eddd3540a4