www.arkeaassistance.fr

- FEDERAL SERVICE GIE -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:87:14:31:b9:77:28:ca:e8:45:d3:86:5e:5a:ec:09 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

FEDERAL SERVICE GIE

Organization: FEDERAL SERVICE GIE
Locality: Le Relecq Kerhuon
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:87:14:31:b9:77:28:ca:e8:45:d3:86:5e:5a:ec:09
Serial Number (int): 10005965634167430699660899880353328137
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5b:de:17:64:b3:93:1e:0d:2c:68:35:b3:dd:8d:8a:d2:eb:3e:6b:db
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f7:de:ed:c5:9b:2a:8f:66:a8:e4:50:38:25:dd:48:ef:a0:0d:bf:ba
Fingerprint (sha256): d7:91:1d:ce:1f:30:7c:76:12:08:ad:68:a8:8f:7c:ed:6e:42:3e:11:59:a9:88:5e:35:c7:20:4a:4a:87:52:01

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.arkeaassistance.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arkeaassistance.fr

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arkeaassistance.fr

Other certificates including the domain name arkeaassistance.fr

(limited to 100 certificates)
www.arkeaassistance.fr
domus.rec.arkeaassistance.fr
domus.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
domus.arkeaassistance.fr
ensemble.rec.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
domus.arkeaassistance.fr
domus.rec.arkeaassistance.fr
ensemble.rec.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
ensemble.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr
www.arkeaassistance.fr

Certificate

The complete raw certificate details for www.arkeaassistance.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10005965634167430699660899880353328137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Le Relecq Kerhuon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FEDERAL SERVICE GIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.arkeaassistance.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3530198762143821460054569117418867254724991256825936380482419342574658833653006406737827934099131789663631902689116536074787638092540642975325692758430097140589264092025278198670592050406535073902666447679848024735648962475529989818352694766956528219100074045989056659162234210669178379253446702416495599957449228496901788528471649243468370419050893259931698836463221723683388665018562943388844653182493333887392188617734900449458803751595105833617916390498889798890239309945960464481245438688637533194118136841799473405483957471604290434755890685307769627583980478090125756344036457844704917014667192885318437135633743621247308324413918391825548501089052908433670295403926500805356913197991222932274080386167693800951385799006996462858990731770875717139720492207587722719581112378779221445674776863622505359273381215251443382278956033548254555516311075953648041418827101533494475779583545265566440598563541191342862564247487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bde1764b3931e0d2c6835b3dd8d8ad2eb3e6bdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkeaassistance.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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