*.cegedim.fr

- CEGEDIM -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 65:53:8d:f2:d4:6d:a7:50:63:f9:ee:e2:18:7f:ea:7c was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CEGEDIM

Organization: CEGEDIM
Organization unit: CEGEDIM
State / Province: HAUTS-DE-SEINE
Locality: BOULOGNE BILLANCOURT
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:53:8d:f2:d4:6d:a7:50:63:f9:ee:e2:18:7f:ea:7c
Serial Number (int): 134685867272247722308561384494715628156
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): c2:07:62:25:e2:cc:cc:bc:21:8b:64:ce:bb:7d:a5:9f:e4:97:68:b3
Fingerprint (sha256): e4:89:8f:23:6f:f2:54:43:81:22:a8:14:19:f0:28:d8:34:18:59:31:09:71:33:e8:da:a2:28:07:98:93:fc:18

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate *.cegedim.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cegedim.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cegedim.fr
cegedim.fr

Other certificates including the domain name cegedim.fr

(limited to 100 certificates)
cai.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
trophees.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
teledistrib.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
pmx01i.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
serviceclientteams.cegedim.fr
teledistrib.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
oftp2.cegedim.fr
*.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
services-teleprocedures.cegedim.fr
teledistrib.cegedim.fr

Certificate

The complete raw certificate details for *.cegedim.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmH+RLAK33xroHbYItx6
pBHmJ3yF8PUROM/K2eK0XUaD6nZJXUZcDFG4//jRdJgsmzpB26zy445KX3kgh0tL
0Uw/MYEgfv6Cky65b9yiGEq65O9G1SH2XSDmMo2VtgDH3s57BCkuSZs9SwfhQNjm
DaeNy3SYcyibjv6DynLUGZaT13UP8L74K3ERDySsRSgDCyJpTxSAfwgl/H+9F+fS
I3xaWI7L51WtCcK0GYOQGhAfbFYN73V/bx0q+LciIACO+geirCFTgAFt3V0Gl/2U
wk+Py2hj+ICKhFWgQ2DBy1+NPJz/zS253QLQ9hSO9gufDY5QfpWvHXV//BrK0D6T
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134685867272247722308561384494715628156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HAUTS-DE-SEINE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BOULOGNE BILLANCOURT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CEGEDIM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CEGEDIM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cegedim.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22518740549423660002445479836808213664069219545216714247030276409657808698774763455842130020660349104589897167779454322761672205612156407601452474575284248433915416290184798638891226185741579272126375303575861421153578841211972596066402407631449316473874907082621005179697283392501374944680653489307095250762003243637227719377866521456533921939341812303270851554000424354696911386924735542015907930208361347391855312995239830979892914978316196955374992686196514840279395832793551787760360429069628979001928528860102234161323270167782566150199417901659570270443739028861229699143466657089184781706365204668042270643193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cegedim.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cegedim.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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